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Abstract (U) 

This report describes the B61-6,8 bombs in development as a part of the Stockpile 
Improvement Program. The bomb design, its ancillary and support equipment, and 
the planned test and evaluation program arc presented. 
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The B61-6,8 bombs will result from a factory retrofit 
of the B61 -0,2,and 5 bombs. This retrofit is being conducted 
aspanofthcB6rStockpileImprovcmcniProgram(SIP). The 
goal of the B61 SIP is to upgrade B6ls in stockpile by incor¬ 
porating modem design features of safely, use control, and 
improved operational flexibility. References 1-9 trace the 
stockpile reviews identifying the shortcomings of the stock¬ 
pile and the recommendations for a selective retirement/ 
retrofit program. Each of these references is reproduced in 
Appendix A of the B61 -7 Weapon Development Report 10 and 
summarized in the foreward of that document. The mechani¬ 
cal and electrical design of the B61 -6,8 is very similar to the 
B61-7. an ongoing retrofit of the B61-1 scheduled to be 
completed in September 1990. 

The SIP does not follow the normal nuclear weapon 
path of authorizations and approvals. No 01 through 03 


activities occur. The first authorization occurred with the 
release of the Nuclear Weapons Production and Planning 
Directive (P&PD) issued by the Director of Military Applica¬ 
tions in March 1987 scheduling the production oftheB61-6,8. 
Phase 4 authorization was granted by DOE/AL November 
1987. Since stockpile assets are required for the B61-6,8 
production, a Product Change Proposal was coordinated 
through Field Command, DNA defining the effect of the 
retrofit. The PCP for the B61-6 was approved in April 1988. 

At this time, the DOE/DoD coordinated draft Military 
Characteristics for the B61 -6,8 await NWCSC approval. T7le 
Interim Design Review and Acceptance Group (DRAAG) is 
tentatively scheduled for May 1989. 
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Summary 


The B61-6.8 is a factory retrofit of the B61-0.2.5, 
utilizing an IHE nuclear primary and enhanced electrical 
safety components. Use control, command disable, and im¬ 
proved operational flexibility features arc also included. The 
B61-6.8 was designed to be compatible with all aircraft now 
approved for B61 carriage. Compatibility will only be 
demonstrated for those Navy aircraft listed in the MCs: A-4, 
A-6, A-7, F/A-18, and A-12 (when available). No known 
problems exist. 

The B6I-6.8 will be fielded to be compatible with 
aircraft employing AMACs without Intent Unique Signal 
(IUQS) generators through the employment of the MC3025 
Signal Selector. The MC3025 will be removed from all 
bombs on or before 1 January, 2000. Only aircraft with IUQS - 
capable AMACs will be compatible after this lime. 

Significant design features of the B6I -6,8 arc as fob 

lows: 


Delivery Options'. 

Frccfall Airburst (FFA) 

Frccfall Groundburst (FFG) 

Retarded Airburst (REA) 

Retarded Groundburst, Laydown (REG) 

Aircraft Delivery Constraints: 

Certified to maximum aircraft capabilities 
’ 7 

- _ £ _) ( M 2) 

Safety : 

Use of IHE for primary explosive 
Primary is inherently one-point safe 
Enhanced electrical safety to meet modem nuclear 
safety standards 


Physical : 
Length 
Diameter 
Weight 


3597 mm (141.6 in.) 
338 mm (13.3 in.) 
350 kg (770 lb) 


Yields : 


Use Control : 


Ui) 


Li mited Life Component 
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Interim Development Report 
for the B61-6,8 Bombs 

1. B61-6,8 Overview 


Design Objective 

The B61 Stockpile Improvement Program objective is 
to upgrade ail B61 bombs to incorporate modem design 
features of safety, use control, and improved operational 
flexibility. 

Design Characteristics 

The B61-6,8 will provide enhanced nuclear detonation 
safety and plutonium scatter safety in abnormal (accident) en¬ 
vironments by the use of: (l) exclusion region isolation of 
safety-critical electrical circuits with colocated wcak-link and 
stronglink devices, (2) prearm and post-release unique signal 
control of strong links, and (3) insensitive high explosive 
(IHE). Use control is provided by Category D Permissive 
j Action Link (PAL) and nonviolent comm and disable (CD) 

^ r 

__ 

7 w assuming proper electrical and environmental inputs. Tcsls 
and analyses have been performed to evaluate the response of 
ihcbombio theStockpilc-to-TargctSequence (STS) environ¬ 
ments. 

The physical characteristics of the B61-6,8 arc: 


No field testing or maintenance is required other than at 
the time of limited life component exchange. Field mainte- 



T* ; 


Exceptions/Limitations 

_None: ihc B6I-6.8 meets all MCs. The MC reliabili ty 

\J - 

bw 


Weight 
Diameter 
Length 
CG location 


350 kg (770 lb) 

338 mm (13.3 in.) 

3597 mm (141.6 in.) 

1530 mm (60.25 in.) from nose 
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2. Bomb Description 

General Boost System 

The B61-6,8 is a major modification to the B61-0,2,5 
bombs in stockpile. Return of B61-0,2,5s to the DOE 
production facility is required for the conversion to be per¬ 
formed. To reduce production costs, maximum reuse is made 
of returned bomb'components. Table 1 indicates the major i 
parts from the returned, or“parcm," weapon, and Lhc new pro¬ 
duction parts that make up a B61-6,8 bomb. “Carryover” 
design pans from the B61-7 program currently in production 
were used when possible to save development and production 
costs. 



Nuclear System 

TU 7 -----* 

The nuclear system for the B61-6.8 uses the “parent” 



Primary 
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Table I. 


Source of B61-6,8 Major 
Com po ne n is/ A sse m b 1 ies 


Secondary 




Mechanical/Structural Design 

The B61-6,8 consists of four major subassemblies 
(Figure 1): —Radar, Cent er Bomb. Prellieht and Tail 1 i 

-i vt« 

v,(- 


Nose 

Center Bomb 

Preflight 

Tail 


MM 
MCI 828 
MC4110 


mm 

MC2807 

MC4111 


-MC4118- 
-MC41 19 


MCI828 (B61-6)/MC2807 (B61-8) Bomb 
Radar Nose 

The MCI828/MC2807 Bomb Radar Nose" (Figure 2) 
extends from Station 0 to Station 26.75 (679 mm). The 
attachment to the center case sccuon is made with 36 screws, 
hkc all of the major subassembly matings on the B61. A dual 
channel radar and dual channel impact fu/cs arc located in the 
nose. Honeycomb material is incorporated behind the radar 
and impact tu/.ocircuitry 12 to provideenerpv absorption dur¬ 
ing laydown. 


12 
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MC4110 (B61-6)/MC4111 (B61-8) Center 
Bomb Subassembly 

The Center Bomb Subassembly consisLs of the nuclear 
system; the arming, fuzing, and firing system; and the center 
ease section. 
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MC4118 Preflight Bomb Subassembly 

The MC4118 consisisof ihc MC4136 Prcfliglu Control¬ 
ler and the MC1951 Rocket Motor. 13 The prcflighl ease 
section has a variable cross section witii a maxi mum thickness 
of 0.75-in. (19.05 mm) 7075-T73511 aluminum cylinder and 
joins the center and tail ease sections. The aft suspension lug 
bolts to the top of the preflight ease section while the forward 
lug is secured to the center ease section. Prcflighl ease 
sections will be reused Tor the Mod 6 and 8 bomb after 
machining to enlarge the prcflighl controller access door 
opening. 

The reused MC1951 Rocket Motor is bolted to the 
prcflighl ease; its function is to spin the weapon to provide 
aerodynamic stabilization during frccfall deliveries. Since 


the MC1951 is no longer in production, rebuild of NMFTand 
SFT units will use the MC3003 (Figure 4). Functionally and 
mechanically, the MC3003 is identical to the MC1951 except 
the ignitor in the MC3003 is a one-ampere no-fire, one-ohm 
device, whereas the MC1951 containsa lOOmilliampcreno- 
firc, 4.5 ohm ignitor. The electrical system is designed to fire 
either device. 

The MC4136 Prcflight Controller is also secured to the 
prcflightcase. Access to the preflight control panel is through 
a door in the case; this door is provided with dust and EMR 
seals. Several cables terminate in or pass through the preflight 
section interconnecting the 1CU and preflight controller with 
components in the preflight and tail sections. 



NOZZLE SUBASSEMBLY 


CHAIN INHIBITOR 


PROPELLENT GRAIN • 
AMMONIUM PERCHLORATE 
POLYSULFIDE PREPOLYMER 


rtTRANITROCARBAZOLE- 

BRIDGE WIRE 

8RI0GE CONTINUITY LOOP 

MOUNTING FLANGE- 

INITIATOR SUBASSEMBLY 

IGNITER SUBASSEMBLY 


MC 3003 SPIN ROCKET MOTOR 


IGNITER CLOSURE DISK 


PLUG 


CLOSURE CHSK 


NOZZLE INSERT 


NOZZLE PAD 


B0R6N CALCIUM CHROMATE 


BORON/POTASSIUM NITRATE 


Figure 4 MC3(X)3 Rocket Motor 
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MC4119 Tail Bomb Subassembly 

This subassembly includes the bomb retardation sys¬ 
tem, the MC3624 Filter Pack 14 , and the MC2213 Actuator and 
Pulse Battery Assembly. These components arc mounted 
within a light aluminum ease to which four fins arc bolted. 
The retardation system, which includes the MCI887A Para¬ 
chute 15 and its deployment hardware, the ease section, and the 
fins arc reused from the parent bomb. The MCI887A Para¬ 
chute consistsof a 17-ft-diamcicr ribbon-type parachute packed 
around a set of telescoping aluminum tubes, a suspension line 
load ring, a deployment plate, and a set of deployment tube 
brakes. The parachute is deployed by firing the MCI 83 5 Gas 
Generator 14 (Figure 5) into the volume enclosed by the tele¬ 
scoping tubes. Line stretch is obtained in approximately 
0.165 seconds. For rebuild of NMFT and SFT units, the B61 - 
6.8 will use the MC3002 Gas Generator. The diffcmcc 
between the MC3002and MCI 835 is the energy requirements 
or the ignitor. Like the MC3003 spin rocket motor, the 
MC3002 employs a one-ohm, one ampere no-fire ignitor 

ratiter than thc4.5 ohm,-580 milliampere all-fire device used 
in the MCI835. 

The filter pack and the actuator and pulse battery assem¬ 
bly arc bolted to the lop- i nsidc of the tail ease. The fil ter pack's 

umbilical connector and the actuator and pulse battery 
assembly’s pullout rod extend through holes in the tail ease for 
aircraft interface connections. 


B61-6,8 Mass Properties 

At this time, estimates for the B61 -6,8 weight, CG, and 
moments of inertia arc based on comparisons with previous 
B61 mods. The components causing the largest deviations 
from the B61-7 will be the Acorn assembly, MC4137TSSG, 
and the JTA (ballast for WR). When the Fidel ity of the test unit 
warrants, we will adjust these estimates as necessary during 
the development program. Final verification of mass proper¬ 
ties will be obtained on the first few B61 -6 bombs at the DOE 
production plant. The table below presents the best available 
data with comparisons to the B61 stockpile. 


Table 2. B61 Mass Properties 
1*61-0,1,2,5 B6I-3.4 B61-6 B61-8 

CG, in 60.265±.25 61.2+.5 60.26 60.16 

Wt, lb 716+10 751±15 768 770 


‘Moments of inertia arc in Ibm-in* units. 



anti static shunt mix 


BRIDGE CONTINUITY LOOP 


BRIDGE WIRE 


BORON CALCIUM CHROMATE 


80RON POTASSIUM NITRATE 


BORON POTASSIUM NITRATE 


INITIATOR SUBASSEMBLY 

PROPELLANT IMR 4350 

0 RING SEAL 
INITIATOR CLOSURE DISK 
IGNITER SUBASSEMBLY 

CLOSURE DISK 


EPOXY 


0 RING SEAL 


Figure 5. MC1X35 Gas Generator 
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Electrical System 

The B6l-6,8 Electrical System provides all arming, 
Turing, and firing signals required to initiate the nuclear 
system following proper prearming and delivery by strike 
aircraft. In addition, the MCs require that the bomb design 
provide stringent nuclear safety during all phase s of the STS 
prior to bomb prearming (Chapter 4). \ \ 


__ j Use control (Chapter 6) is pro¬ 
vided by Category D PAL and' Command Disable (CD) 
systems. Typical aircraft/bomb operational sequences are 
described in Chapter 3. 

Bomb electrical components that are required to survive 
and function following laydown delivery are contained within 
the center bomb subassembly. These include the MC2918 
Firing Set, MC3554 Neutron Generator (2 each), MC4138 
Programmer, MC3656 Main Battery (2 each), and the 
MC4139 Junction Box. The MC4175 (2 each) or MC4137 
(one) Trajectory Sensing Signal Generators are also located 
in the center bomb subassembly. Electrical signals into the 
center bomb subassembly pass through a single MC36I2 
Lightning Arrestor Connector (LAC) mounted on the cover 
plate. 

The MC4140 Interface Control Unit mounts on the 
preflight subassembly side of the cover plate. TheMC4136 
Prcflight Controller mounts directly to the preflight case. 
Similar mounting is used to secure the MC3624 Filter Pack 
and the MC2213 Actuator and Pulse Battery Assembly to the 
tail section. 


i 
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MC2918 Firing Set 
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The MC2918 t which contains the major bomb 
sating elements, is divided into three regions that arc 
separated by high-iempcraiurc-rcsislant, electrically 
insulating barriers. ~t 


IL 


The second region contains the transv'erier power 
amplifier circuits and the MC2935 TSLSs. All signals 
entering the second region pass through the MC2969 
ISLS. 

The third region contains the MC2918’s high- 
voltage transformer and X-unit. Parallel 5-M thick- 
film resistors are provided to bleed the X-unit charge 
within about 5 seconds if arming power isremoved. All 
signals entering the third region pass through the con¬ 
tacts of the MC2935 TSLSs. The neutron generator 
trigger signals are transformer-coupled through the 
exclusion region barrier. 


MC2969 Intent Stronglink Switch 

The MC2969 Intent Stronglink Switch, 19 which is 
currently being produced for the B61 -3,4, B61 -7 W78 

W80 QnH R»7 : n .u.. r»/i ^ O . 




2 SP 


niu— l 


W80, and B83, is used in the B6I -6,8. The switch is part of 
the intent safety subsystem (Chapter 4). Functionally, the 
MC2969 isolates all firing set exclusion Region 2 circuits 
from exclusion Region I circuits 
until it receives the proper intent 
unique signal (IUQS) from the 
AM AC system. The switch, shown 
in Figure 7, consists of two main 
pans: a contact assembly of 14 
ceramic insulated output switches, 
and an electromechanical decoder/ 
driver that decodes the IUQS and 
drives the output switch assembly 
to closure given the proper signal 
(Figure 8). The drive mechanism 
is designed to operate the switch 
assembly to the closed (prearm) 
position after receipt of the correct 
IUQS pattern of shon and long 
pulses. An incorrect IUQS pattern 
will lock the MC2969 switch in the 
open position unti I receipt of a safe 
or reset input signal. A dc safe 
signal ora reset pulse (greater than 
1350 ms) will reset the decoder/ 
driver and place the switch assem¬ 
bly in the SAFE (open) position. 


Figure 7. MC2969 Intent Stronglink Switch 
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MC2935 Trajectory 
Stronglink Switches 

The MC2935 Trajectory Slron- 
*glink Switch, 20 which is currently being 
produced for the B6l-3,4, B61-7, W80, 
and the BK3 is used in the B61-6,8. This 
switch is part of the second nuclear 
safety subsystem, the trajectory safely 
subsystem (Chapter 4). The MC2935 
isolates all firing set exclusion Region 3 
circuits from exclusion Region 2 cir¬ 
cuits until receipt of the required trajec¬ 
tory unique signal (TUQS). One 
MC2935 is used in each channel of the 
firing set. The switch, shown in Figure 
9, consists of two main pans: a decoder/ 
driver mechanism, and a functional 
contact assembly. Thedccoder/drivcr is 
a dual-solenoid mechanism requiring 
two electrical input signals to operate. 
The switch is designed to close the func¬ 
tional contacts when provided theproper 
TUQS shown in Figure 10. 

The MC2935 is a single try de¬ 
vice: that is, should it receive an incor¬ 
rect TUQS, it will mechanically lock. 
Having been locked by an incorrect 
TUQS, i i wi 11 not respond to further elcc- 
irical input signals until it is manually 
unlocked and simultaneously reset by 
proper electrical reset input signals. 



Figure 9. MC2935 Trajectory Stronglink Switch 


Figure 10. Trajectory Unique Signal 
(TUQS) 
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MC3554 Neutron Generator 


Figure 1 1 . MC3554 Neutron Generator 
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Figure iz. MC3554 Neutron Generator, visual display andTunciro^iai assemblies. 
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MC4141 Electrical Component 
Assembly (ECA) 

The MC4141 ECA is the third deck of components in¬ 
side the center bomb subassembly (Figure 12). The ECA 
houses Lhc MC4138 Programmer, MC4175 or MC4137 Tra¬ 
jectory Sensing Signal Generator, 

MC4139 Junction Box, and the 
MC3656 Main Batteries. 


MC4138 Programmer 

The MC4138 Programmer in¬ 
cludes two independent and identical 
channels (Figures 13,14). Two iden¬ 
tical circuit boards arc encapsulated 
in polyurethane foam in an aluminum 
housing unaltered from that of the 
B61-7 programmer. 


Figure 13. Printed wiringasscmbly ofa single channel of the 
MC4138 Programmer. 


j. 




{Other functions include ini¬ 


tiation of the main batteries, provid¬ 
ing power and height of burst infor¬ 
mation to the radar, and receiving 
radar fire and crystal (impact) fire 
signals and transmitting them to the 
firing set if appropriate. To deter¬ 
mine delivery mode and mission 
options, the programmer communi- 
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cates and receives data from the MC4140 Interface Control 
Unit (ICU). 

Except for differences in the machined holes in the 
housing for heat-sink components and edentifiealion mark¬ 
ings, the MC3637 Programmer for the B61-7 (Figure 14) is 
visually identical to the MC4138 Programmer used on the 


switches, the trajectory unique signal generator circuitry pro¬ 
duces the pulse train outputs necessary to operate and close 
the MC2935 Trajectory Slronglink Switches in the firing set. 

The rolamite switches used in the MC4175 arc the 
MC3671 (2 each) and MC3672. Both the MC3671 (Figure 
15) and MC3672 use cases and end caps molded from diallyl 

a bond the end caps to the 


Figure 14. MC3637 Programmer 

MC4175/MC4137 Trajectory 
Sensing Signal Generator 
(TSSG) 

Two versions of TSSGs will be used in 
the B61 -6,8. The MC4175 is identical to the 
MC3640 22 used in the B61-7 except for the 
pigtail connector which attaches to the 
MC4139 Junction Box. The new MC4137 
TSSG will be available to support the B61- 
6 production in July 1991. The MC4175/ 
MC4137 TSSG is part of the second nuclear 
safety subsystem, the trajectory safety sub¬ 
system (Chapter 4). The MC4137 differs 
from the MC4175 in design, construction, 
and nuclear detonation safety design phi¬ 
losophy. 

MC4175 TSSG 

The initial B61-6 production will use 
two MC4175 TSSGs. Each MC4175 con¬ 
tains three fluid-damped, nonlatching iner¬ 
tial sensing switches (rolamites) and cir¬ 
cuitry to output the trajectory unique signal 
(TUQS). When powered through thcrolamitc 



Figure 15. MC3671 Rolamite Switch 
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Figure 16. Functional Requirements for 
the Spin-sensing Rolamitcs, Minimum 
Spin Rate 


ease and to seal the electrical feedthroughs 
in the end caps. Each of the three rolamite 
switches contains a set of normally open 
contacts that close when adequate levels 
of acceleration are achieved. Both 
MC3671 s are oriented to sense radial forces 
generated by the bomb rotation about its 
longitudinal axis in frcefall delivery op¬ 
tions. Each of the radial switches is elec¬ 
trically connected in series with one in the 
other MC4175 located diametrically op¬ 
posite in the ECA. The MC3672 is in¬ 
stalled longitudinally to sense decelera¬ 
tion in retarded delivery options.^ Figures 
16 and 17 depict the operational rcquirc- 
mentsofihc rolamites forminimum bomb 
acceleration levels in frcefall and para¬ 
chute retarded delivery modes. 

The function of the rolamite switches 
in the MC4175 TSSG is to hold off power, 
cither pulse battery (retard deliveries) or 
main battery (frcefall deliveries), from the 
TUQS-producing electronics. ThcTUQS 
is“stored"in the electronics. As discussed 
below, the MC4137 TSSG docs not “store" 
the TUQS; only by correctly interpreting 
and storing the IUQS can the MC4137 
generate the TUQS. Storing the IUQS 
“enables" the MC4137 to generate the 
TUQS and hence is “intent-enabled." 


Figure 17. Functional Requirements for 
the Retard-sensing Rolamite, Minimum 
Parachute Retardation 
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MC4137 TSSG 

The “intent-enabled” design of the MC4I37 requires 
ihc MC4I37 TSSG electronics to “store” the IUQS signal 
which enables (operates) the MC2969 Intent Strong Link 
Switch in the firing set 
during the prearming of 
the bomb before aircraft 
release. Until the 
MC2969 arming se¬ 
quence is complete, the 
TUQS signal is not 
“stored” in the MC4137 
electronics. Without the 
information content of 
the IUQS signal, the 
MC4137 cannot formu¬ 
late the TUQS signal. 

The strong link/weak- 
link design and packag¬ 
ing of earlier B61 TSSGs 
is also retained. Addi¬ 
tionally, the new 
MC4137 “intent-en¬ 
abled” TSSG is philo¬ 
sophically improved 
over the earlier TSSGs 
designed for the B61. 

Discussion of the n uc lear 
detonation safety of the 
two TSSG designs ap¬ 
pears in Chapter 4. 

During prearm of 
the bomb, the MC4137 
TSSG will store the 
IUQS code in “volatile” memory; without power thccodc will 
not be retained. The design of the MC4137 will assure that the 
IUQS is retained for a minimum of 7 seconds of power loss. 
If all arming power and monitor power is lost for longer than 
7 scconds, theMC4137 will interrupt the arm monitor line to 
the AMAC. On Navy System 1 aircraft (A-7E and F/A-I8), 
this will result in both the “arm” light and the “safe” light 
being illuminated when power returns. On the FSA aircraft 
(A-4M, A-6E,G), the “disagreement” light will illuminate. A 
power dropout long enough to cause this condition will 
require the pilot to retransmit the IUQS to “rearm” the TSSG. 
Power dropouts of shorter duration will not affect the AMAC 
indications or cause additional pilot workload. The use of 
volatile” memory for IUQS retention is a desirable nuclear 
safety design feature. 

Although the B61-6,8 MCs only require compatibility 
with Navy strikcaircraft, the MC4137TSSG will be designed 
to be compatible with all aircraft approval for carriage of any 
B6I. Additionally, all aircraft listed in the B90 MCs will be 
tested for compatibility during development. Demonstration 


Figure 18. MC4137TSSG, Intent-enabled 


of aircraft compatibility and subsequent incorporation in the 
B61 ACCD will be restricted to those listed in the MCs. 

Whereas the MC4175 TSSG uses two identical, non- 
conductive assemblies to provide outputs to the two MC2935 
Trajectory Strong Link Switches in the Tiring set, both chan¬ 
nels of the MC4137 are packaged in a single conductive en¬ 
closure (Figure 18). The materials selected arc-304 stainless 
steel for exclusion region protection and 6061 aluminum for 
the cover. The single housing is designed to maintain me¬ 
chanical integrity of the housing, rolamiies, and exclusion 
area electronics in abnormal environments. Isolation of all 
signals from the ease is required. 

The top assembly in Figure 18 is the exclusion region 
containing the rolamiies, wcak-link ROM, and the circuitry 
necessary to communicate the ROM pattern through the 
rolamiic contacts to the microprocessor. The circuit board is 
ceramic. The circuit boards in the middle of figure 18 arc 
identical, with surface mount components on one side (left) 
and leaded, “through-hole” components on the other. This 
circuitry is mounted u> the sloe I topoi^ the exclusion region and 
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lies beneath die aluminum cover. 

Two new rolamitcs tire in development; the MC4.1.46 to 
sense bomb spin and MC4 147 for retard deliveries. Both arc 
steel-ease, hermetically sealed assemblies. As in the MC4175, 
the spin rolamitcs arc connected in series between the two 
channels and arc diametrically opposed in the bomb to require 
true spin of the bomb. The new rolamitcs arc approximately 
two-thirds the size of the MC3671/3672 rolamitcs and de¬ 
signed for increased rugged ness and predictability in abnor¬ 
mal high shock environments. Since the rolamile ease and the 
band is electrically grounded to the TSSG case, the contact 
block in the roller is isolated from the roller and the band. The 
required electrical path is through the pins and the contact 
block. Figure 19 illustrates the“rest” position of therolamite 
(top and side views). The band of each rolamite is designed 
to fail in a predictable manner in very high shock levels. Fig¬ 
ure 20 shows the resultant position of the rolamite after sus¬ 
taining a shock sufficient to break the rolamite band. Note the 
contact block is welded to the band, not to the roller. The 
resultant failure position of the band after a very high shock 
is repeatable and illustrates the safety of the design. To fail 
armed, the isolated contact block would have to provide an 
electrical path through the pins. Previous rolamite designs 
(including the MC3671/MC3672) have used electrically-iso¬ 
lated materials for the eases and utilized the band as the con¬ 
ductive path between the input and output pins. Shorting 
through the band of the MC4146 and MC4147 will shunt the 
signal to ground. The contact block assembly provides the 
only means of an electrical path from input pin to output pin 
internal to the rolamite. Figure 21 provides another illustra¬ 
tion of the “rest" and “actuated" rolamite states and the 
resultant position after a high shock has failed the rolamite 



Figure 19. MC4146/MC4147 Rolamites, 4C R‘est" 
Position 



Figure 20. N1C4146/MC4147 Rolamilcs, “Safe" Band 
Failure 


band. 

To format the TUQS 
signal, MC4137 TSSG will 
combine 24 bits of the IUQS 
signal with 24 bits stored in 
a thermal weak-link ROM 
(read only memory) cur¬ 
rently in development. Low 
mcltalloy loops on a printed 
circuit board (Figure 18) 
form the 24 bits of the 
ROM. Melting of the 
“loops" in high tempera¬ 
tures from abnormal envi¬ 
ronments will result in ei¬ 
ther opening or shorting to 
the board. Either alterna¬ 
tive is “safe"; combining 
the wcak-Iink ROM and the 
IUQS signal will lock up 
the MC2935 TSLS. 



Figure 21. MC4146/McM 147 Rolamitcs 
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Main Battery and 
Cable Assembly 

The battery and 
cable assembly consists 
of die MC3656 Main Bat¬ 
tery 26 (Figure 22) mated 
widi an integral cable (Fig¬ 
ure 23) and is identical to 
that used in the B61-7. 

Two each are used in the 
B61 -6,8, one per channel. 

The MC3656 isa low-volt¬ 
age thermal battery used 
to supply power to the elec¬ 
trical system beginning no 
later than 1.7 seconds from 
initiation and lasting for a 
minimumofl20 seconds. 

Lithium-silicon/iron di¬ 
sulfide (Li(Si)/FcS 2 ) elec¬ 
trochemical system is 
used. Lithium-silicon al¬ 
loy is the anode and iron 
disulfide is the active cath¬ 
ode material. As in all thermal batteries, a fused salt electro- Figure 22. MC3656 Main Battery 
lyte is activated by heating it to a temperature above the 
electrolyte’s melting point using a pyrotechnic heal source. 

An MC2Q46 Igniter (l-A no-fire) fired by the MC4138 Pro¬ 
grammer is used to activate the pyrotechnic. 


MC 3656 THERMAL BATTERY 

vons. 3 Amp UfOsec 460 cm 3 LKSIJ UCI-KCI MgO FoS 2 


Fiber-Fro« . 
Heat PoMei 

Heat Pellet <Fe KCIO4I 
Anode Collector 
Anode (Li(Sil) 
blectrolyte Binder 
Cathode (FeS 2 ) 
Cathode Collector 

Heal Pellet 
Fiber-Frnr ' 


— Electric Squib 

-Igniter Pellet 



Thermal Insulation 
(Mln-K TE1400) 


Figure 23. Battery and Cable 
Assemblies 
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Figure 24. MC3616 Junction Box 

single muluiaycr circuit board mat electrically interconnects" 

with 11 S A1387-iypcrack-and-pancl connectors and 2 S A1530 
double-density rack and panel connectors. A molded cable 
terminated with an MC3612 Lightning Arrestor Connector 


MC4139 Junction 
Box 

The MC4 139 
Junction Box (Figure 
24) serves as a junction 
and distribution box for 
a major portion of all 
arming, fuzing, and fir¬ 
ing signals. Anelectri¬ 
cal connections between 
the center ease, Lhc pre- 
flight, and tail subas¬ 
semblies arc made 
through the junction 
box. \ 


(LAC) is also attached to the junction box. This assembly is 
encapsulated in mica-filled epoxy. 

lhc MC3612 LAC ,iS (Figure 25) is a 41-pin rutile 
particle (TiO,) design. 


Figure 25. MC3612 Lightning Arrestor Connector 


I he LAC features are 
lubricated intoanSA3016 
connector shell which is 
an extended version of die 
hermctical I y sealed, sLii n - 
less steel, SA1457 con¬ 
nector. A stainless steel 
wch with holes for each 
connector pin is used to 
provide a small air-gap 
between the pins and the 
return path. The air-gap 
around all pins is filled 
with mule panicles and 
then sealed. This assem¬ 
bly gives a nominal break¬ 
down voltage of 1000 V 
and a maximum accept¬ 
able breakdown voltage 
ot 1 v when tested 
* nh a lO-kV/pM i'uIm- 
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MC4140 Interface Control Unit 



Cover Assembly 

MC4140 

386834-00/101 
(B61-6/8) 


MM9 


IRS 


The MC4140 In¬ 
terface Control Unit 
(ICU) is a microproces- 
sor-based component 
(Figure 26) housed in a 
hermetically sealed 
stainless steel container 
identical to that of the 
MC3638 ICU used on 
the B61-7 (Figure 27). 

The ICU is mounted on 
the aft surface of the 
center case cover plate. 

Cables from the ICU 
interconnect with the 
MC3624 Filler Pack, the 
MC4136 PFC, and the 
MC3612 LAC pigtail on 
the MC4139 Junction 
Box. Each electrical 
connector is hermeti¬ 
cally scaled. Both the 
programmer and ICU 
use the same Intel 80C51 
microprocessor. The 
ICU has functional re¬ 
quirements while on¬ 
board the carrier aircraft 
and after release of the bomb. Whileon-boardthcaircraft,the 
ICU is designed to provide: 


Figure 26. Cover Assembly of the MC4140 Interface 
Control Unit 



a. Logic Monitor - Circuitry necessary to monitor the state 
of the MC2969 Intent Stronglink Switch (enabled, safe) and 
provide the proper response to both FS A and System l aircraft 
AMAC circuits. Additionally, an interface 
with the MC4I37 TS,SG is provided to as¬ 
sure feedback to the aircraft in ease of power 
dropouts. 

b. Delivery Mode (FFA, FFG, REA, or 

REG)- ICU circuitry stores the intended 
delivery mode as selected from the aircraft 
(System l AMACs) or the aircraft and the 
MC4136 Preflight Controller (FSA/B 
AMACs). _ - --- _ 


Figure 27. MC3638 ICU 
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d. Safe Separation Time (SST) Selection - Two independent 
SSTs, TA and TB arc set on the prcflight controller. Some 
AM ACs can select between TA or TB. The ICU is designed 
to store and use this in forma lion .. t 

After bomb release, the MC4140 is wit hout p ower until 
the rise of Uic weapon system pulse batteries.! 
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[’Ihe re¬ 
maining function of the ICU is to perfornfthc timing and 
“gale” pulse battery power to initiate the spin rocket or gas 
generator. Alter the “deploy" function, the ICU tasks are 
complete and “shutdown" is commanded. 

MC4136 Preflight Controller 


i 


____ _ Thcpreflighicontrolleralso 

houses the DE1002 Coded Device and MC3246A Thermal 
Baucry (identical to the MC3246 24 in the B61-7 except lith¬ 
ium -si I icon/iron disulfide (Li(Si)/FeS 2 ) electrochemical sys¬ 
tem is used) for command disable, the JI connector for PAL 
operations or interconnecting with the MC4142 Strike Enable 
Plug, and the PAL voltage regulator. The command disable¬ 
ment and PAL components are described in Chapter 6. The 
preflight controller is mounted to the prcflight bomb subas- 
sembly case. 

The switGh markings and function associated with each 
switch position are as follows: 

TAaniTB-For non day down deliveries, two independ¬ 
ent aircraft safe escape times (TA and TB) are selected. The 
selection of bach requires the manipulation of two digital 
switches, one for the tens data (1-10) and one for units data (0- 
9). The maximum safe escape time for the B61 is 69 seconds; 
lhercfore,the7,8,9,and lOswitchpositionsofthetensswitch 
are shorted to the 6 switch deck. Thus, 109 becomes 69, 77 
becomes 67, etc. No provision is made to prevent TB settings 
shorter than TA or vice versa. The selection of the appropri¬ 
ated safe escape lime is made from the aircraft during bomb 
prearm. 

Delivery - 2 position; RE,FF 
RE - retarded 
FF - frcefall 

Aircraft with FSA AMACs like the Navy A-6Ecan not 
override tills switch. Arm position selections on the AMAC 
arc limited to AIR andGROUND. System 1 AMACs like the 


Navy A-7 and A-18 can override this switch; all fourdclivcry 
options arc selectable from the cockpit 


belay - 3 position; u, H, J 


G — 0.3 second deployment delay 
H — 0.6 second deployment delay 
J — 1.6 second deployment delay 
Additionally, positions G and H provide short laydown 
delay (30 seconds) and position J provides long laydown 
delay (80 seconds) for aircraft safe escape from laydown 
deliveries. DiscussionsatihcB61 POM and lheB6l Environ¬ 
mental Sugroup have recently addressed the use of “J" by 
Navy aircraft Future B61 ACCDs may restrict the use of 
longer delay times than compatibility tests and analyses have 
shown to be sufficient to provide separation. No settings 
longer than thc“minimum" times now specified in the ACCD 
will be approved. 
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Figure 28. MC4136 Preflight Controller 
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MC2213 Actuator and Pulse 
Battery Assembly 

The MC2213 27 (Figure 29) consists of two MC2238 A 2 * 
or MC2238B Pulse Batteries,an MC2217 Pullout Switch,and 
a capacitor-resistor network. Aircraft power is required 
t>cforc release to charge the capacitor network. When extrac¬ 
tion occurs, the MC2217 Switch completes the circuit to apply 
the capacitor-stored energy to the electric matches of the 
MC2238A/B Pulse Batteries. The MC2238 Pulse Batteries, 
depicted in Figure 29, will be replaced by MC2238A or 
MC2238Bs (Figure 30) that arc designed and tested to the 
greater electrical load of the 861-6,8. Resistors arc provided 


to bleed off the charge in less than two seconds if arming 
power is removed. 

'Hie MC2238A/MC2238B Pulse Batteries supply power 
to the bomb electrical system until the MC3656 Main Batter¬ 
ies reach operating voltage. The pulse batteries arc required 
to provide source power to the ICU (including spin rocket or 
parachute iniiiaLion),programmcr(including the main battery 
initiation), and the TSSG to drive the MC2935 Trajectory 
Stronglink Switches in retard delivery options. 


POWER [AIRCRAFT] 

STORAGE & DISCHARGE SYSTEM 


R-F GASKET 


SA 1633 TUBE SOCKETS [2 EACH); £ MC 2217 PULLOUT SWITCH 



MC 2238 THERMAL BATTERIES 
(2 EACH) 


SWITCH-RESET ACCESS HOIF 
[2 EACH) 

|-28 UNF 'FLOATING INSERTS [4 EACH) 



Figure 29. MC2213 Actuator 
and Pulse Battery Assembly 
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Figure 30. MC2238A Thermal Battery 
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MC3624 Filter Pack 

The function of Lhc MC3624 Filter Pack 29 (Figure 31) is 
to attenuate aircrafl-wiring-induccd EMR/EMP signals and 
to provide anelectrical connector for aircraft interfacing. The 
MC3624 is housed in an aluminum casting that is attached to 
the inside surface of the tail subassembly. A long junior trilock 
(LJT)-iypc connector protrudes through a hole in the tail 
subassembly for aircraft electrical interfacing. Inside the alu¬ 
minum housing arc filters that perform the EMR/EMP attenu¬ 
ations. The MC3624 is used in die B61-7. 


Figure 31. MC3624 Filter Pack 


MC3025 Signal Selector 

The MC3025 Signal Selector, sometimes referred to as 
the“normal/ovcrridcswitch” is an IUQS-generator combined 
with a manually operated two-position switch (Figure 32). 
The purpose of the MC3025 is to supply the IUQS to drive the 
MC2969 Intent Strong Link Switch in the firing set to com¬ 
plete the prearming operation when the AMAC in the aircraft 
is not IUQS - capable. At the present time, the Navy A-4M, A- 
6E, and A-7E aircraft do not have lUQS-capable AMAC’s. 
There is a high level DoD/DOE agreement 30 that all aircraft 
will be equipped with lUQS-capable AMAC’s by i January, 
2000. By that time ail MC3025’s will be removed from the 
B61-6,8. 

The MC3025 was developed for the 
B61-5 (FPU June 1977) and was subse- 
quendy used in the B61-3,4. Since May 
1988, new production B61-3,4 have not in¬ 
corporated MC3025 Signal Selectors. .Re¬ 
moval of the MC3025 from the B61-3/will 
begin in 1989. These signal selectors will be 
used in the B61-6.8. 

The switch positions are designated 
NORMAL and OVERRIDE. Two inde¬ 
pendent mechanical motions, linear and ro¬ 
tational, are required to change switch posi¬ 
tions. IntheOVERRlDEpositio^theswitch 
allows prearm power to be applied to the 
input terminals of the intent unique signal 
generator in the MC3025. With the MC3025 
in OVERRIDE, the nuclear detonation safety 
of the B61 -6,8 is reduced. The nuclear deto¬ 
nation safety requirement in abnormal (accident) environ¬ 
ments and the nuclear safety concerns of the MC3025 arc 
addressed in Chapter 4. 




Figure 32. MC3025 Signal Selector 
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Cables 

Some cables from ihc parent wcaf>on will be reused for 
the B61 -6,8. These include the radar and nitrogen cartridge 
cables inside the ccnicr case from the B61-0,2,5 and Ihc de¬ 
ployment initiation cables to the gas generator and spin rocket 
inside die prcflight subassembly from the B61-5 only. There 
arc six ncw-dcsign cables identified by CF-numbcrs; four in 
the ccnicr case and the one between the preflight and tail 
sections. In addition, the build of the B6l-6,8 will require ten 
new, carryover-design cables; however, five of these cables 
arc part of a “parent 11 B61 -5 and arc not necessary for a B61 - 
5 to B61-8 conversion. All cables arc constructed of teflon- 
insulated conductors within a polyurethane or kapton sleev¬ 
ing. Three connector types arc used: junior trilock (JT), long 
junior trilock (LJT) with rigid inserts,and rack and panel. The 
table below summarizes the B61-6,8 cable requirements. 
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Cables for B61-6,8 



—New Build— 


Parent 

Carrv- 

New 



Over 

Design 

£E 

Radar-J B A 



1805 

n 2 -jb A 



1804 

Gas Gen 

(61-5) 


2241 

SpinRockct 

(61-5) 


2240 

FP-MC3025 

(61-5) 


2262 

FP-ICU 

A 


2638 

ICU-PFC 

A 


2636 

ICU-PFC 

- A 


2637 

ICU-LAC 

A 


2635 

FP-PFC/ETU 


A 

2940 

JB-FirineSet 

A 

- — - - 

. .2654 

JB-Disable 


~A - 

“ 1908 

FiringSct-NG 


A 

2906 

FiringSct-NG 


A 

2907 

Pullout 

(61-5) 


2233 

Pullout 

(61-5) 


2438 


□ 


MC4142 Strike Enable Plug 

The MC4142 Strike Enable Plug attaches to the J l 
connector on die MC4136 Preflight Controller. To meet the 
MC requirement for a separable component “vital to the 
function of ihc bomb/ 1 the S EP provides two circuit interrup¬ 
tions; IUQS and the nuclear identification line from the 
AMAC. 


Figure 33. B61 -6.8 Aircraft Interface 


Figure 33 illustrates a B6l-6,8 aboard a typical Navy 
aircraft and shows the CF2233 or CF2438 Pullout Cable and 
pullout lanyard hook-ups. Both pullout cables arc EMR- 
protcctcd cables that provide electrical interfacing between 
the B61 -6,8 and the carrier aircraft. The CF2233 wi II be used 
with FS A AMACaircraft like the A-4M and A-6E.G while the 
CF2438 will be used with System 1 A MAC aircraft like the A - 
7Eand F/A-18. Both connectors of thcCF2438 arc identical 
types and could be reversed. The differences in the physical 
appearance (Figure 33) should preclude lhat occurrence. 
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3. System Operation 


General 

Prenight operations and arming, fu/.ing, and firing events 
for the four bomb delivery options arc discussed in this 
chapter. A simplified functional block diagram (Figure 34) 
and pictorial event sequences for each bomb delivery option 
(Figures 35-38) arc included. Those procedures and electrical 
system operations that arc common to each delivery option 
arc presented below. 

Before takeoff, the appropriate switch settings are made 
on the MC4136 Preflight Controller as described in Chapter 
2. At this lime, the PAL could be unlocked through the J l 
connector of the MC4136 with ground equipment (Chapter 6) 
or after takeoff if the aircraft is equipped with a PAL-capable 
AMAC. Complelcbomb prearming cannot be accomplished 
until the PAL is unlocked (i.c., enabled). The MC4142 Strike 
Enable Plug would be installed. If theaircraft docs notcontain 


an IUQS-capablc AMAC, the MC3025 Signal Selector must 
be rotated to the OVERRIDE position. 

The bomb may now be prearmed before release by 
rotating the AMAC selector switch to the desired option 
position. On FS A/B AMACs, this selector switch provides 
two positions: air or ground. Retard or frecfall is obtained by 
the delivery switch position on the preflight controller. On 
System I AMACs like the A-7Eand F/A-I8, the AMAC has 
four positions corresponding to the four delivery options: 
FFA, FFG, REA, and REG. With this capability, the RE/FF 
Delivery Switch on the MC4136 PFC is overridden. 

The F/A-18 AMAC generates a unique train of pulses 
(IUQS) to drive the MC2969 Intent Stronglink Switch to the 
closed (enabled) position. Without the AMAC-produced 
IUQS, the MC2969 will be enabled by the MC3025 Signal 
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I-'ilitire 34. I3rs I -o.x Ftinchona) Block Diagram 
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Selector (in OVERRIDE) with dc-prcarm power when the 
AM AC is rotated to an ARM position. The MC4137 TSSG 
stores the IUQS. On another line, the AM AC applies preann 
power to charge the capacitors in the MC2213 Actuator and 
Pulse Battery Assembly. 


At bomb release, tne crzzJ3 (FSA aircraft) dr CFZ4J8 1 
(System l aircraft) Pullout Cable and the pullout pin of the 
MC2213 are extracted via the bail and lanyard from the bomb 
(Figure 31). There is not a requirement to extract the lanyard 
pullout pin before the bail pullout cable. The “soft” memory 
circuits of the MC4140ICU are designed to be without power 
from the earliest pullout cable extraction to the latest pulse 
battery rise. At pullout, the MC2213 discharges the capaci¬ 
tive network through the closed switch contacts into the 
MC2238A/B Pulse Battery ignitors. 

When the pulse battery rises to a nominal 19 V (-80 ms), 
both the MC4138 Programmer and the MC4140 ICU begin 
timing and each microprocessor starts its instruction set. The 
programmcrchccks the source of power, pulse battery or mai n 
battery (“shutdown” is commanded if the power source is the 




4 J i 


main battery — an abnormal situation), and at approx i mately 
50 ms begins interrogating the ICU. , 

•For 

personnel and nuclear detonation safely discussed in Chapter 
4, the ICU com mands “shutdown” ifdclivcry option informa^ 
tion is missing . 


i 

I 

« 


After receipt ol the interrogation data, the programmer' 
“gates” (or “connects and then disconnects”) pulse battery 
power to initiate the main battery ignitors. The sole remaining 
function of the ICU after answering the programmer's inter¬ 
rogation is to “gate” pulse battery power at the selected de¬ 
ployment time (G,H,J) to initiate either the gas generator 
(retard deliveries) or spin rocket (frecfall). Having completed 
its requirements, the ICU microprocessor is held in a “shut¬ 
down” mode where no further outputs.are possible. 

At this point in the operational sequence, the main 
batteries’ voltage is rising and will be at operating voltage 
before first possible ground impact in REG (laydown), the 
programmer has received all inputs from outside the center 
ease (except for radar or crystal signals), and the spin rocket 
or gas generator has been initiated. Completion of the fuzing 
and firing operations wil 1 be described for each bom b del i very 
mode. 


Freefall Airburst (FFA)Delivery 

Upon initiation of the spin rocket, the bomb spins to a 
minimum roll rate of about 3 revolutions per second within 
about 1 second (Figure 35). The canted fins will sustain the 
roll rate. This roll rate closes the radial inertial switches 
(rolamitcs). At 3 seconds after release, the programmer 
“gates” main battery power to the MC4175 or MC4137 TSSG 
to drive the MC2935 Trajectory Stronglink Switch in the 
firing set (dual channel). 

The aircraft-selected safe separation time (SST) has 
been previously communicated by the ICU to the program¬ 
mer. At 7 seconds before SST, the programmer “gates” main 
battery power to the radar and at 4 seconds before SST, the 
programmer activates circuitry to communicate height of 
burst selection to the radar. 

o- 
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At sate separation time minus 3 seconds, the program¬ 

mer connects main battery power to the transveaer oscillator 
in the firing set (Al). At safe separation.time, similar 
programmer circuitry connects main battery power to the 
firing set transveaer (A2). With these two inpuLs, each 
electronic transveaer can charge the 2.0- pF firing set X-unit 
capacitor and the 0.6-pF neutron generator capacitors to 
approximately 3300 V and 2400 V, respectively, in less than 
j 1.2 seconds. 





















Figure 35. Event Sequence, Frccfall Airburst 





At safe separation time plus 1.5 seconds, programmer 
fire circuitry is enabled. Once this occurs, any subsequent 
radar fire signal will result in the programmer providing 
closure of the main battery to firing set (A3), causing X-unit 
discharge which initiates the neutron generator timing cir¬ 
cuitry and fires the nuclear primary detonators. 

If backup fuzing is selected, at SST plus 1.5 secondsthe 
programmer will also accept impact crystal signals as valid 
fire signals. If neither radar nor crystal signal is received, the 


programmer will provide A3 at 120 seconds (design life of the 
main batteries). If backup fuzing is not desired, the program¬ 
mer will not deliver A3 if impact crystal signal is received. 
Contact preclude is not guaranteed. If the bomb impacts the 
ground with a charged firing set, the X-unit may be triggered 
by the impact (bypassing the programmer), even if backup 
were not desired. 
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Figure 36. Event Sequence, Frccfall Groundburst —‘—- 


Freefall Groundburst (FFG) Delivery 

Upon initiation of the spin rocket, the bomb spins to a 
minimum roll rate of about 3 revolutions per second within 
about 1 second (Figure 36). The canted fins will sustain the 
roll rate. This roll rate closes the radial inertial switches 
(rolamites). At 3 seconds after release, the programmer 
“gates’ 1 main battery power to the MC4175 or MC4137 TSSG 
to drive the MC2935 Trajectory Stronglink Switch in the 
% Firing set. 

The aircraft-selected safe separation time (SST) has 
been previously communicated bv f h r Trn 



At safe separation time minus 3 seconds, the program¬ 
mer connects main battery power to the transverter oscillator 
in the Tiring set (Al). At safe separation time, similar pro¬ 
grammer circuitry connects main battery power to the firing 
set transverter (A2). With these two inputs, each electronic 
transverter can charge the 2.0- uF firing set X-unit capacitor 
and lhc0.6-pFneutron generator capacitors to approximately 
3300 V and 2400 V, respectively, in less than 1.2 seconds. 

At safe separation time plus 1.5 seconds, programmer 
fire circuitry is enabled. Once this occurs, the subsequent 
crystal fire signal will result in the. programmer providing 
closure of die main battery to the firing set (A3), causing X- 
unn discharge which initiates the neutron generator liming 
circuitry and fires the nuclear primary detonators. 
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Retarded Airburst (REA) Delivery 

Firing the gas generator into the volume enclosed by the 
telescoping tubes starts the parachute deployment process 
(Figure 37). The deceleration produced by the deployed 
parachute closes the longitudinal nonlatching inertial switch 
(rolamiie). The design of the rolamite guarantees a closure 
time greater than the maximum required (0.734 seconds) for 
the MC4175 or MC4137 TSSG to enable the MC2935 Trajec¬ 
tory Stronglink Switch in the firing set. 

The aircraft-selected safe separation time (SST) has 
; been previously communicated by the ICU to the program¬ 
mer. At 7 seconds before SST, the programmer “gates' 1 main 
. battery power to the radar and at 4 seconds before SST, the 
programmer activates circuitry to communicate height of 
burst selection to the radar. 





< 
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At sale separation time minus 3 seconds, tnc^rogram- 

mer connects main battery power to the transverter oscillator 
in the firing set (Al). At safe separation time, similar 
programmer circuiiry connects main battery power to the 
firing set transverter (A2). With these two inputs, each 
electronic transverter can charge the 2.0- pF firing set X-unit 
capacitor and the 0.6-pF neutron generator capacitors to 
approximately 3300 V and 2400 V, respectively, in less than 
1.2 seconds. 

If backup fuzing is selected, at SST plus 1.5 seconds the 
programmer will accept cither a radar fire or impact crystal 
signal as a valid fire signal. Activation of the impact crystal 
at parachute-retarded terminal velocities (80 fps) will not be 
reliable in all terrain. If neither radar nor crystal signal is 
received, the programmer \k\W provide A3 at 120 seconds 
(design life of the mam haitervi. 
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Figure 38. Event Sequence, Retarded Groundburst (Laydown) 


j 


Retarded Groundburst (REG) or 
Laydown Delivery 


Firing the gas generator into the volume enclosed by the 
telescoping tubes slaris the parachute deployment process 
(Figure 38). The deceleration produced by the deployed 
parachute closes the longitudinal nonlatching inertial switch 
(rolamilc). The design of the rolamite guarantees a closure 
time greater than the maximum required (0.734 seconds) for 
the MC4175 or MC4137 TSSG to enable the MC2935 Trajec¬ 
tory Stronglink Switch in the firing set. 

For the laydown delivery mode, the safe separation 
times selected on the preflight controller do not apply. Air¬ 
craft safe escape maneuvers arc instead constrained by the 
laydown delay lime, which is 30 seconds or 80 seconds. 
Selection of G or H deploy time results in a 30-sccond delay, 
whereas J provides an 80-sccond delay. As discussed earlier, 
selection of J may be restricted in the B61 ACCD except for 
aircraft requiring that time to ensure safe escape^ 


'! j 


At safe separation lime minus 3 seconds, the program¬ 
mer connects main battery power to the transverter oscillator 
in the firing set (Al). At safe separation time, similar pro¬ 
grammer circuitry connects main battery power to the firing 
set transverter (A2). ; With these two inputs, each electronic 
transverter can charge the 2.0- jiF firing set X-unit capacitor 
and lhe0.6-pF neutron generator capacitors to approximately 
3300 V and 2400 V, respectively, in less than 1.2 seconds. 

At safe separation time plus 1.5 seconds, the program¬ 
mer will provide closure of the main battery to firing set (A3), 
causing X-unit discharge which initiates the neutron genera¬ 
tor timing circuitry and fires the nuclear primary detonators. 
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4. Nuclear Safety 


General 


$ 

£ 


This chapter summarizes the B61-6,8 nuclear safety 
design and evaluation program. The intent of the nuclear 
safely design is to assure that when the B61 -6,8 is exposed to 
normal or abnormal (accident) environments, there is a 
probability of less than 1 in 10’or 1 in 10 6 , respectively, that 
its TNT e quivalent yield will not e xceed four po unds. 


i 

i 

i. 


Nuclear safety requires isolation of all significant volt¬ 
ages from key components within the firing set and from 
nuclear system detonators, thus precluding simultaneous 
detonator function. This isolation must be assured for all 
normal and abnormal environments except for authorized 
use. Although the B6l-6,8 contains internal power sources, 
these sources arc limited to a maximum terminal voltage of 
less than 50 V. Safety analyses conservatively assume these 
■power sources to be activated in all abnormal environment 
scenarios. 

System nuclear safety evaluation is accomplished both 
“by analysis and by testing to verify the predicted results. In¬ 
cluded in this chapter arc a description of the B61 -6,8 nuclear 
safety design and a summary of the nuclear safely evaluation 
program to be performed. The limited number of fullscalc 
tests scheduled as pari of the B61 -6,8 evaluation program is 
due to the applicability of B61 -3,4 and B61-7 nuclear safely 
evaluations. 


Design Theme 

The following goals for achieving nuclear safety 
were established for the B61-3,4 and B61-7 development 
programs and are also applicable to the B61-6,8 design: 

• Provide an assured, predictable safe response of 

< - the bomb in a broad range of accident environments, 

including fire, impact, crush, and puncture 

• Provide a design that is insensitive to electrical 
faults in accident situations 

• Provide a design that meets the nuclear safety 
requirements without requiring detailed definition of 
the abnormal environments. 


The basic theme of the B61-6,8 nuclear safety design 
is to isolate nuclear safety critical circuits from all unintended 
sources of electrical energy. This theme is implemented 
through nuclear safety design concepts that include: 

• Exclusion Regions — The important features of the 
exclusion region design concept arc: 

(a) consolidation of the safety-critical circuit ele¬ 
ments into a localized region of the bomb, 

(b) use of physical barriers between safety-critical 
elements and all energy sources that could cause 
the critical elements to function, and 

(c) controlled access of intended electrical signals 
through the physical barriers by special unique- 
signal-operated devices that can be actuated only 
in the intended use mode. 

• Stronglinks — Access to the safety-critical circuit 
elements contained within the exclusion regions is 
controlled by safely devices called stronglinks. These 
devices provide the only access for electrical energy 
intothcassociaicdexclusionrcgion,which is completely 
enclosed by the physical barrier. In the B61-6,8, these 
devices arc unique-signal-operatcdstronglinkswitchcs 
(MC2969 Intent Stronglink Switch and MC2935 
Trajectory Stronglink Switch). 

• Wcak-links — A weak-iink is a functional element, 
critical to the initiation of the nuclear system, and 
designed to fail irreversibly at environmental levels 
less severe than those which fail or bypass the strong¬ 
link devices and physical barriers. 

• Colocauon of Weak-links and Stronglinks — The 
wcak-links and stronglinks arc packaged in close 
proximity (colocated) within the exclusion rcgion(s) 
so that they experience comparable environments. 
Sincea wcak-link isdesigned to failatan environmental 
level well below the failure or bypass levels of 
strong! inks and barriers, the proper sequential response 
of these safety elements will occur in credible abnormal 
environments. 

• Signal Incompatibility/Inopcrability— Unique sig¬ 
nal patterns are rcqui red to close the strong l ink s w itches, 
which control electrical signal access to isolated exclu¬ 
sion regions. These features virtually eliminate the 
likelihood that typical electrical energy sources as¬ 
sumed to be present in an accident situation could drive 
these switches to a closed (unsafe) position. 
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Design 

Implementation of the above design theme iscxpectcd 
to provide levels of safely ^assurance against premature nu¬ 
clear detonation of 1 in 10 9 and 1 in I0 6 in normal and 
abnormal environments, respectively. Ihrcc independent 
safety subsystems have been designed into die B61-6,8 elec¬ 
trical system to satisfy the safety assurance levels for the 
environments defined in the B61-6,8 STS: 

(1) Intent Safety Subsystem, 

(2) Trajectory Safety Subsystem, and 

(3) Arming Safety Subsystem. 

Two of the safety subsystems, the intent and trajectory sub¬ 
systems, constitute the abnormal environment safety design. 
Each independent system is composed of a unique signal 
generator (USG) and an associated uniquc-signal-opcraicd 
stronglink switch. Thestronglink switches are located within 
the MC2918 Firing Set. The intent and trajectory subsystems 
operate in series, with each expected to provide a safely 
assurance level of greater than 1 in 10 3 . Together, they 
provide an assurance level of greater than 1 in 10 6 in normal 
and abnormal environments. The third subsystem, the arming 
subsystem, is intended to provide a safety assurance level of 
greater than 1 in 10 3 in normal environments only. The three 
independent systems together, then, provide a safety assur¬ 
ance level of l in 10 9 in normal environments. Figure 35 is a 
simplified schematic diagram of the pertinent mechanical 
features and electrical components involved in the B61-6.8 
nuclear safety design. 

The center ease section contains the nuclear safely 
critical elements of the B61-6,8 and is designed to ensure 
electrical system survival and function following laydown 
impact on hard targets. As will be described in this section, the 
robust mechanical design for reliability, mitigates the effect 
of some abnormal environments. Center ease components arc 
enclosed within two metal housings. The outer case structure 
is a thick (0.534 in., 13.6 mm) aluminum extrusion containing 
the nuclear system and electrical components. This ease is 
closed at the aft end with an aluminum cover plate secured 
with a ring which threads into the inner surface of the ease. 
The only external point of entry for electrical energy through 
the cover plate is via the lightning arrestor connector.! 


1 


MC2918 

The MC2918 Firing Set is the electrical system safely 
design focal point for abnormal environments, 'flic safetv 


design concepts of exclusion region isolation, wcak-link/ 
stronglink element colocation, and unique-signal safety de¬ 
vices arc implemented in the firing set. The exclusion regions 
arc physically defined by cells in the firing set that arc formed 
by the walls of the firing set container and the stronglink 
switches. Figure 39 shows the firing set with the covers 
removed, revealing the exclusion regions defined as follows:. 
Region I — Exclusion Region l of the firing set is 
protected by the bomb case and the LAC. All firing set 
components not isolated from external electrical sig- 
nals by a stronglink switch are in Region l.( 


17 


Region 2—Thisexclusion region is completely within 
the firing set container. It is isolated by the insulative 
barrier walls of the container and stronglink switches. 
The region contains the firing set power amplifier 
circuits and the MC2935 Trajectory Stronglink 
Switches. 

Region 3 — This region contains the safety-critical fire 
set CDU circuits and weapon detonator cable assem¬ 
blies. The firing set CDU circuits are isolated from 
unintended electrical signals by the firing set container 
walls and the MC293 5 Trajectory Sirongl ink Switch in 
series with the MC2969 Intent Stronglink Switch. The 
firing sci covcrs the detonator cables and protects them 
from inadvertent electrical energy.? 


The physical layout of the MC2918 Firing Set is 
configured to provide colocation of wcak-link/stronglink 
elements. Ideally, the packaging would assure that the 
stronglinks arc provided greater protection from severe 
environments than the weak-link$. However, this ideal is 
seldom attainable within the constraints of volume, form- 
factor, and adjacent assemblies. The alternative is to control 
the location and/or dcstruct paths so Lhat it is assured that the 
weak-links 1 destructive environmental level is reached prior 
to the time that the stronglinks 1 bypass environmental level is 
reached. For example, in some fire environments, heat may 
be directed at a side of the weapon that would tend to heal the 
MC2935 Stronglink Switch faster than the firing set CDU 
capacitor, and the MC2935 Stronglink Switch temperature 
may be grcaicr than the capacitor temperature; however, the 
capacitor will become irreversibly inoperable while the 
MC2935 is maintaining isolation. This type of sequential 
response is necessary to assure a predictable, safe system 
response during abnormal environments. 
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As shown in Figure 39, the sealed covers of Region 1 
ol the Firing set arc not on the same surface as the covers for 
Regions 2 and 3. This allows hot and possibly conductive 
gases generated in Region 1 by an abnormal environment to 
escape without compromising the barriers between Region 1 
and Regions 2 or 3.^ ~ 


! 
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The firing set housing and detonator cable cover is 
fabricated from i ibcrglass-rcinforccd, compression-molded 
MXB-71. MXB-7I is fire-resistant with excellent dielectric 
strength properties for temperatures up to 500°C. The open¬ 
ings in the barriers lor the functional strong!ink switch con¬ 
tacts and necessary openings into Regions 2 and 3 for test or 


reset of the MC2935s arc sealed wkh high-temperature sili¬ 
cone. The metal mounting screws for the stronglink switches 
arc through the container wall and arc similarly closed from 
the exterior of the Firing set by plugs of MXB-71 sealed with 
the same silicone. 

To assure protection of the firing set exclusion regions 
by the stronglink switches, the contact assembly of each 
switch is constructed of metal and ceramic parts. The free 
volume is minimized to avoid bridging between input and 
outputcomacts by unintended conductive paths during abnor¬ 
mal thermal and crush environments. The switch housings arc 
made of high-strength stainless steel to resist deformation in 
crush environments. The MC2969 and MC2935 can each 
withstand at least 1600 V dc at temperatures up to 400°C. 
Both switches contain discriminator mechanisms that, upon 
receiving an incorrect input signal, lock the switch in theopen 
position. The MC2969 is resettable, requiring a pulse of 
correct length and amplitude to return the discriminator 
mechanism to its initial state. To be reset, the MC2935 
requires both a manual release and a specific electrical signal 
input. Because physical access to the firing set is required, this 
procedure can only be done at a DOE manufacturing facility. 
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MC Requirements 



Normal Environments 

The B6l-6,8 military characteristics suite: 

"The probability (per bomb lifetime) of a premature nuclear 
detonation for Lhc normal environments described in the STS 
shall not exceed: 

1. Prior to prearm (which includes application of 
the arming powerand the unique intent cnabl ing stimu¬ 
lus) and prior to release from the aircraft and in the 
absence of the trajectory stimulus, 1 x 10 9 . 

2. After prearm and prior to release from the air¬ 
craft, and in the absence of trajectory stimulus, 

I x l O' 6 . 

3. After prearm and after release from theaircrafL, 
and in the absence of the trajectory stimulus, 

1 x \0\ 

The probability (per occurrence) of a nuclear detonation in 
the normal release envelope after receipt of the trajectory 
stimulus shall not exceed: 

1. Prior to expiration of the safe separation time, 
1 x I0\ 

2. Afterexpiration of the safe separation lime and 
prior to the intended detonation. 1 x K) 2 .” 


Abnormal Environments 

The military characteristics for the B6l-6,8 state: 

* The probability (per occurrence) of a nuclear detonation of 
a bomb for individual or credible combinations of abnormal 
environments specified in the STS shall not exceed: 

1. In the absence of any uniqueantent and trajec¬ 
tory stimuli, 1 x 10^. 

2. After receipt of the unique intent and in the 
absence of the trajectory stimulus, 1 x lO’ 3 . 

3. Placing the norm a [/override switch in the over¬ 
ride position shall be considered intent enabling stimu¬ 
lus.” 

Safety Subsystems 

Fault tree analysis techniques are useful for defining 
and evaluating the nuclear safety design of the bomb system. 
Figures 40 through 43 arc abbreviated examples of fault trees. 
These figures illustrate the three safely subsystems incorpo¬ 
rated in the B61 -6,8 to meet nuclear detonation safety require¬ 
ments in normal and abnormal environments. Both DOF 
(Sandia, Los Alamos, and production agencies) and Dol) 
requirements arc addressed. 



Figure 40. Fault Tree, Loss of FJectrical System Safety 
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Arming Safety Subsystem 


(DOE) 


The arming subsystem, when combined with the intent 
and trajectory subsystems, provides the additional 1 x 10* 3 
nuclear detonation safety to achieve the MC requirements in 
normal environments. No abnormal-environment nuclear 
detonation safety requirements arc placed on this subsystem. 
This subsystem prevents the application of normal environ¬ 
ment aircraft and bomb electrical system signals to critical 
circuits. Electrical signals at the bomb umbilical and preflight 
controller connectors are restricted to prescribed PAL or 
stronglink monitor signals from the aircraft or T-gcar. 

The component assemblies included in the arming 
subsystem arc the MC22I3(A) Actuator and Pulse Battery 
Assembly, the MC2238A/B Pulse Batteries, the MC3656 


Main Batteries, MC4138 Programmer,and the MC4140ICU. 
The delivery option selection circuitry and the ICU software 
provide positive control of the output of the pulse batteries. 
Premature actuation of a pulse battery will result in system 
'‘shutdown” without the required aircraft delivery option 
voltage being present. Premature of the main battery will 
similarly result in system “shutdown" by the programmer. 
Both premature actuation of the pulse battery and aircraft 
prearm power must occur for the ICU and programmer to 
function in the intended use mode. For the arming safety sub¬ 
system, the DoD must insure that prearm dc-powcr is not ap¬ 
plied to the umbilical connector. The DOE will insure the 
components involved meet the design requirements. 
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Intent Safety Subsystem 

As shown in figure 42, both the DoD and DOE must 
meet requirements for the Intent Safely Subsystem to provide 
assured nuclear detonation safety. The DOE must assure that 
ihc MC2969ISLS in the firing set meets the isolation require¬ 
ments and is only enabled upon the application of the IUQS. 
The DoD must assure that the IUQS signal is not generated 
prematurely due either to inadvertent or inappropriate human 
action or hardware malfunction of the IUQS generator in the 
AM AC. Both DOE and DoD must meet these requirements 
in the event of an abnormal environment. 


If the MC3025 Signal Selector is in the OVERRIDE 
position, there arc no requirements of the intent safety 
subsystem to provide protection in an abnormal environment. 
With the selector in OVERRIDE, the bomb will meet only a 
1 x 10 3 probability of a nuclear detonation in an abnormal 
environment Additionally, 1 x 10* 3 probability of a nuclear 
detonation can only be met in the “absence of the trajectory 
stimulus.” 



( DoD) (DoD) 


Figure 42. Fault 'free, 1 .osx of Intent Subsystem Safety 
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(DoD) 


Figure 43. Fault Tree, Loss of Trajectory Subsystem Safety 


Trajectory Safety Subsystem 

Of the three nuclear safety subsystems, arming, intent, 
and trajectory, only the trajectory safety subsystem is com¬ 
posed entirely of DOE hardware. The DoD responsibility is 
to assure that no accidental simulation of the “intended use" 
environment (retardation or spin) occurs. Major components 
within this safety subsystem arc the MC4175 TSSG or the 
MC4137 TSSG and the MC2935 Trajectory Strong-Link 
Switch in the Tiring set. The MC4175 TSSG is identical to the 
MC3640 TSSG (B61-7) except for a connector change and 
will support B61-6 production for the first six months until the 
MC4137 TSSG is available. 

MC4175 

The MC4175 TSSG is a sccond-gcncraiion design of 
trajectory sensing devices incorporated into B6I bombs to 
enable (close) the MC2935. In the mid-70's, the MC2948 
TSSG was designed for first use in the B61 -5 and was later 
used on the B61-3,4. Both the MC2948 TSSG andMC4175 
TSSG use“strongiink/wcak-link"design philosophy to achieve 
nuclear safety in abnormal environments. The normally open, 
acceleration-sensing rolamite switches (stronglinks) inter¬ 
rupt electrical power from the TSSG electronics that generate 
the trajectory unique signal (TIJQS). The application of 
power through the inertial rolamite switches to the electronics 


will produce theTUQS to drive the MC2935. Thus the design 
theme requires that the TSSG rolamite switches (sLronglinks) 
be capable of surviving, without shorting, higher levels of 
shock or temperatures produced by an accident environment 
than the TUQS-producing electronics/ceramic circuit board 
(weak-link). Failure of the stronglinks in severe environ¬ 
ments is acceptable, but only if the weak-link also fails 
irreversibly. 

Figure 44 is a simplified block diagram of the trajec¬ 
tory safety subsystem with the MC4175 TSSG which illus¬ 
trates the electrical connection for both the parachute retarded 
and spin-stabilized freefall delivery modes of the bomb. 
Functional contacts of the MC2969 IntentStrong-Link Switch 
arc required to be closed before the TUQS can drive the 
MC2935. Both the intent and trajectory safety subsystems arc 
designed to meet a goal of 10 given an abnormal environ¬ 
ment; each is considered to be independent and no contribu¬ 
tion to the trajectory safety subsystem because of the interrup¬ 
tion of the MC2935 drive lines by the MC2969 is assumed. In 
the spin-stabilized bomb delivery mode.one radially oriental 
rolamite switch in each of the two TSSGs must close before 
the series circuit is closed between the bomb power source and 
the TUQS-producing electronics. The two MC4175 TSSGs 
are mounted opposed to each other equidistance from the 
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Figure 44. Block Diagram, Trajectory Safety Subsystem 
with MC4175TSSG 

bomb’s longitudinal center lincsothata radial acceleration or 
deceleration may cause both of the radially-mounted rol am ites 
in one TSSG to close, but the spin rolamites in the opposite 
TSSG will remain reset. Spinning of the bomb is required to 
close all four spin rolamites. 

Numerous shock tests of the MC3671 (spin) and the 
MC3672 (retard) rolamites have revealed the MC3671 to be 
most susceptible to shock: 4000g, 1 ms when the direction of 
the shock causes the rol lers to travel from Lhc reset end (resting 
end) to the actuate end. The heavier rollers of the MC3671 
travel to the actuate end with sufficient vclocity/cncrgy to 
separate the end cap from the ease. In all other directions the 
MC367I is 6000g’s or greater, as is the MC3672 in ail 
directions, including the actuate direction. 

By design, the ceramic printed wiring board for the 
TUQS electronics is the weak -link for the MC4175 TSSG in 
the shock environment. The two-sided bonding of the DAP 
rolamites to the mica housing of the MC4175 TSSG insures 
minimum failure levels of approximately 6000g's. Whereas 
shocks perpendicular to the ceramic board result in breakage 
at as low as 330g, shocks in the plane of the board do not result 
in predictable failures (fracture). Abnormal environment 
testing of the ceramic boards have shown boards to survive 
~7000g’s in the plane of the board (undesirable since the 
stronglink rolamites can fail at lower levels). However in no 
system test nor component-level testing ofcomplclc MC3640 
TSSGs for the B61-7 did there exist an “unsafe” condition. 
Some abnormal environment tests have resulted in damaged 
rolamites and/or lack of adhesion to the exclusion region 
barrier and an undamaged circuit board, but none exhibited a 
shortcircuit that could transmit power to the electronics. With 
the actuate contacts on one end of the rolamitc, bypass 


requires Lhc band or roller to remain at the 
actuate end. None of the damaged rolamites 
exhibited a potential for that condition. 

Two polycarbonate capacitors, essen¬ 
tial components for the generation of the 
TUQS, arc used as the thermal weak-link. 
Both the DAP rolam itc and the glass-bonded 
mica housing of the MC4175 TSSG retain 
excellent electrical insulativc properties to 
the structural limit of the materials in high 
thermal environments. With a repeatable 
and irreversible failure temperature of 350° 
to 400°F, the polycarbonate capacitors will 
fail long before bypass of the rolamites or the 
housing is possible. 

It is important to note that “trajectory 
sensing” impl ies the parachute was deployed 
and the resultant retardation forces were suf¬ 
ficient to close the rolamitc switch of"the 
bomb spin rate is adequate to close similar, radially oriented 
rolamite switches. No discrimination capability between an 
“intended use” and a “trajectory” resulting from an accident 
is possible. Any airborne accident can result in damage to the 
bomb tail section and resultant parachute deployment or 
adequate spin rates developing due to the bomb fin cam nec¬ 
essary to maintain roll rate for accuracy in frccfall deliveries. 

MC4137 TSSG 

Where the MC4175 depends solely on the stronglink/ 
weak-link design philosophy, the MC4137 also incorporates 
“intent-enablement” as a safety enhancement. The “intent- 
enabled” design of the MC4137 requires the MC4137 TSSG 
electronics to “store” the IUQS signal which enables the 
MC2969 Intent Strong Link Switch in the firing set during the 
prearming of the bomb 4 before aircraft release. The TUQS 
signal is not“storcd”in the MC4137 electronics. Without the 
information content of the IUQS signal, the MC4137 cannot 
formulate the TUQS signal. The strong link/wcak-link pack¬ 
aging of the TSSG is also retained since the “intent-enable¬ 
ment” is a nuclear safety “enhancement.” The trajectory 
safety subsystem is required to provide 1 x 10 3 protection in 
abnormal and normal environments requiring independence 
of the three safety subsystems. The strong link/weak-link 
packagingof the TSSG will be addressed during development 
as rigorously as would be required if ihcTUQS were “stored.” 

To improve the packaging for abnormal environments, 
both channels of the MC4137 arc packaged in a single steel/ 
aluminum enclosure (Figures 18 and 45). Conductive hous¬ 
ing and barriers of steel arc used to maintain mechanical 
integrity in abnormal environments. The steel housing, exclu¬ 
sion region barriers, and rolamites are electrically conductive 
and designed to divert unintended, accident-induced energy 
to ground. Isolation of all signals from the ease is required in 
normal environments lor reliability. 
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With MC4137TSSG 


Both of ihc new rolamitcs in development (MC4146 to 
sense bomb spin and MC4147 for retarded drops) arc steel- 
case, hermetically sealed assemblies. As in the MC4175, 
there are two spin rolamitcs per channel connected in series, 
diametrically opposed in the bomb to require true spin of the 
bomb. Previous rolamite designs have been constructed of 
insulative materials with the conductive band as the signal 
(power) path between the actuate c on tacts. The new rolamitcs 
are designed for increased ruggedness and predictability in 
abnormal high shock environments. The steel rolamitcs and 
TSSG housing.(exclusion region barrier) will each incorpo¬ 
rate mechanical mounting features that will insure integrity of 
the rolamite/barricr union through all abnormal environ¬ 
ments. This design will result in the rolamite case electrically 
grounded to the housing (system ground). Therefore the 
contact block in the roller is required to be isolated from the 
roller and the band. The required electrical path is through the 
pins and the contact block (see Chapter 2). 

In the block diagram (Figure 45) shown above, the 
exclusion region encompasses the rolamitcs, wcak-iink ROM, 
and circuitry necessary to interface with the SA3331-6 
microprocessor. Each “intent board” is packaged outside the 
exclusion region and contains the aircraft interface circuitry, 
microprocessor, and TUQS drive circuits. To format the 
1 UQS signal, each independent channel of the MC4I37 
TSSG (an intent board and a trajectory board plus three 
rolamitcs) will combine the information from ihc IUQS signal 
stored in the microprocessor with 24 bits stored in a thermal 


wcak-link ROM (read only memory). Low melt alloy loops 
on a printed circuit board (Figure 18) form the 24 bits of the 
wcak-link ROM. Meltingof thc“loops” in high temperatures 
from abnormal environments w ill result in cither opening or 
shorting to the board. Either alternative is “safe”; combining 
with the IUQS signal would lock up the MC2935 TSLS. Early 
thermal testing of the TSSG has recently led to redesign o( the 
housing and wcak-link ROM to mount the ROM to the outer 
wall of housing. An instrumented unit with representative 
rolamites and housing indicated the wcak-link ROM would 
reach guaranteed failure temperature as the rolamite tempera¬ 
ture was approaching its design temperature limit of 500 C F, 
with the ROM mounted on the ceramic board. Mounting of 
the ROM near the outer TSSG wall resulted in considerable 
margin. 

An additional nuclear safely enhancement achieved in 
the design of the MC4137 TSSG is the use of “volatile” 
memory (without power the IUQS code will be lost) to store 
the IUQS code during the prearm of the bomb. A permanent 
memory (“non-volatile”) would require certification of the 
erasure of the IUQS after in-process, acceptance, and system 
level testing. On a “first principles” basis, the incorporation 
of the “volatile” memory is most attractive and defensible 
from a nuclear detonation safety standpoint. Capacitive 
hold up’ energy storage in the MC4137 will assure that the 
IUQS is retained for a minimum of 7 seconds in the event of 
an intermittent aircraft power dropout. If all arming power 
and monitor power is lost for longer than 7 seconds minimum 
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(-2 minutes maximum), the MC4 137 will interrupt the arm 
monitor line to the A MAC. On Navy System l aircraft (A-7E 
and P/A-18), this will result in both the “arm" light and the 
"safe" light being illuminated when power returns. On the 
I ; SA aircraft, llie “disagreement” light will illuminate when 
power returns. The reappIication of arm power in this situ¬ 
ation will cause the MC4137 to erase the IUQS memory 
locations thereby ensuring a “safe” state. A power dropout 
long enough to cause this condition will require the pilot to re¬ 
transmit the IUQS and again “arm” the TSSG. Power 
dropouts of shorter duration will not affect the AM AC indica¬ 
tions until after the MC2213 capacitive network has dis¬ 
charged (or cause additional pilot workload). The use of 
“volatile” memory for IUQS retention is a desirable nuclear 
safety design feature. 

Although the B61-6,8 MCs only require compatibilily 
with Navy strike aircraft, the MC4137TSSG will be designed 
to be compatible with all aircraft approved for carriage of any 
B61. Since some aircraft (e.g., B-1B and B-52 CSRJL) 
interrupt prearm power after sending Lhc IUQS for undefined, 
extensive time intervals, the MC4137 will use “safe monitor” 
power to hold up the “volatile” memory. Only microamperes 
of current is necessary for hold up and all required bomb 
impedances arc maintained. Additionally, all aircraft listed in 
the B90 MCs will be tested for compatibility during develop¬ 
ment for future application of the MC4137. 

After release from the aircraft and rise of the bomb 
pulse batteries, the MC4137 will use thecloscd rolamiiccon- 
Lacis (either the single retard or the two spin rolamilcs) to 
obtain the pattern stored in the wcak-link ROM. Onc-hy-onc 
each of the 24 ROM bits is obtained and “cxclusivc-OR'cd” 
with the corresponding bit of IUQS and transmitted to the 
MC2935 TSLS in the firing set. Each bit is obtained from the 
ROM consistent with the TUQS pulse constraints. Premature 
closure or opening of the rolamilcs will indicate an abnormal, 
or accident environment and result in transmittal of an incor¬ 
rect TUQS code and locking up the MC2935 TSLS. 

Analyses and Tests 

The “individual or credible combinations” of abnor¬ 
mal environments to which the B61-6,8 may be subjected 
throughout the STS are: impact, crushing, puncture, thermal, 
unintended electrical sources, lightning, and chemical im¬ 
mersion. The bomb is designed to have a safe response in 
these abnormal environments, even in the presence of acti¬ 
vated battery power sources within the bomb. Similarly, 
electrical signals (except the unique signals) from external 
sources can beapplied anywhere outside the exclusion region 
and the bomb will mccithc premature requirement. Analyses 
and/or tests will be performed on the B61 -6,8 where necessary 
to confirm the design theme to each of the general classifies- 1 
lions of abnormal environments. Much of Lhc abnormal en¬ 
vironment testing on the B61-3,4 is applicable to this pro- . 
gram, and a major reduction in the number of fullscalc tests 


necessary to confirm the nuclear safety design of the B61 -6,8 
was achieved. The following is a summary of the bomb 
response in each type of abnormal environment. 

Individual Abnormal Environments 
Impact 

Abnormal impact environments can be produced 
through aircraft or truck crashes and accidental dropping of 
the weapon. Maximum aircraft impact velocities of over 1500 
fps or mid-air collisions resulting in the bomb frccfalling to 
earth at velocities of up to 1600 fps arc possible. 

Design Theme. We require the stronglink/cxclusion 
region to remain intact and the stronglinks to remain in the 
reset (open) position until the HE-nuclear system (weak-link 
for this environment) is nonfunctional. 
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(hui wiih different support sleeve designs), showed almost 
linear deformation with applied load until ease rupture at 
305,(XK) lbs and 335 t OOO lbs, respectively. In each test, 
loading was applied through a rigid 2-inch bar placed perpen- 

| dicular to the longitudinal axis of the bomb over die firing set 

; In accident possibilities for the B61 -6,8, the forces necessary 
to rupture the center case do not exist. For example, a fully 
loaded B-52 weighing about 500,000 lbs could rest at most 
i one-half or 250,000 lbs on a B6l-6,8. Maintaining the 
• integrity of the center case, with the stronglinks ensuring 
j electrical isolation to the practical hmit of the environment, 
j assures meeting the 1 in 10 6 safety requirement. 

| Thermal 

I Complete or partial bomb cngulfmem by a JP-scrics 

j kerosene (jet fuel) fire is possible. Fuel supplies arc assumed 
to be sufficient to allow all processes to run to completion. 

Design Theme. In abnormal thermal environments, 
predictable nuclear safety is accomplished by stronglink/ 
wcak-link colocation within an exclusion region whose bar- 
\ riers primarily consistof a high-temperature insulation mate- 
\ rial, MXB-71, and ceramic dielectric in thcsironglink switches. 
\ The applicable wcak-links arc the X-unit capacitor and die 
1 nuclear system high explosive and detonators. 


One B61 -6,8 system test is being planned. A nosc-orT 
impact test at a velocity ( to be determined) greater than the 
last B61-7 test (328 fps) and Jess than 492 fps will be 
conducted to confirm the extrapolations made on the B61 -7 
test. This lest unit may also be used to investigate the effect 
of combined abnormal environments (thermal followed by 
impact). 

Of the new components in development to support the 
B6l-6,8,only the MC4137TSSGhasabnormalenvironment 
requirements. The wcak-link ROM will be characterized in 
shock on both component-level testing and system tests where 


Response Analysis/Tests. Tests demonstrating safe 
response in abnormal thermal environments conducted dur¬ 
ing the B61-3,4 program included the following: 

• High-temperature tesLS on switches and barriers un 
to 1000°F 

• High-temperature icsls on wcak-links (capacitors 
and 1HH) to determine failure threshold 

• High-temperature tests on 12 firing sets at icmpcra- 
turcs up to 1850°F 

• High-temperature tests on four B6l-3,4 test units. 


appropriate. 

Crushing 

This environment is a semi-static situation where, for 
example, during an accident a structural member of the 
aircraft comes to rest on the weapon ease. 


The mechanical packaging and therefore the thermal^ 
properties of the B61 -6,8 is identical to tha t of the B61-7 



- _ _ _ Thc test unit 

was configured to provide ex posurc of a 120° arc of the center 
ease directly to the fire with the remaining portion of the bomb 


Design Theme. The MC2969 and MC2935 stronglink 
switches arc required to hold off any energy reaching the fire 
set in this environment. With the structural properties of the 
thick aluminum center ease and the steel support sleeve 
serving to protect the exclusion region from direct exposure 
to the outside world in any credible suuic crush abnormal 
environment, no wcak-link needs to be identified. 

Response Analysis/Tests. Tests conducted on the 
B61-5 and the B61-3.4. each with the identical center case 


exterior insulated and protected from direct flames. In this 
way, the most preferential heat path to the stronglink switches 
is obtained and therefore a worst-ease test results. The 
thermocouple data (Figure 46) indicated the desired close, 
thermal-tracking of the stronglink and wcak-link tempera¬ 
tures. Thermocouples within die IHE indicated that in this 
orientation the l HE starts burning before the X-unit capacitor 
reaches failure temperature. The bomb IHE was totally 
consumed in the fire without detonating. Posttest examina- 
tion of the firing set revealed total thermal destruction of die 
mylar X-unit capacitor while the stronglinks retained voltage 
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Figure 46. Thermocouple Data From L361-6,8 Fire Test 


standoff capabilities to requirement levels. 

Because of the applicability of the B61-7 test de¬ 
scribed, no bomb-level thermal verification test of the B61- 
6,8 is planned. Thermal testing of the MC4137TSSG will be 
performed to verify the response of the weak-1 ink ROM and 
establish the adequacy of the 500°F limit on the new steel 
rolamitcs. 

Puncture 

Puncture of the bomb by projectilcs/fragmcnts could 
create conductive paths that do not exist in normal environ¬ 
ments. 


Design Theme. Thestronglink switches arc located in 
the inner region of the bombcross-section. Surrounding com¬ 
ponents and materials afford phy sical protection of the switches 
and exclusion region harricipJ 


the use of 




multiple arming signals further assures predictable nuclear 
detonation safety in Lhis environment. 


Response Analysis. High-kinctic energy fragments 
jpan penetrate the bomb center case, the steel sleeve, and the 
Tiring set housing. If the fragments damage the wcak-links to 
such an extent that the nuclear system is rendered inoperable, 


nuclear safely is assured, regardless of bypass paths. If the 
fragments merely leave holes in the case, no arming occurs. If 
the fragments cause conductive paths into the exclusion 
regions, it would be expected that these paths would be 
shorted to cither or both the conductive center case or the 
conductive inner case and thus shunted away from critical 
arming circuits. In order to constitute a threat, a scries of 
unlikely conditions must occur: the fragment must provide 
continuous conductive paths from power sources to critical 
circuits within exclusion Region 3: the paths must be insu¬ 
lated from the center case and steel sleeve that the fragment 
penetrated; and during the penetration, the fragment must not 
destroy the wcak-l inks (X-unit capacitor, detonators, or I HE). 
It is believed these simultaneous occurrences arc not credible. 

Unintended Electrical Sources 

In all abnormal environments, the presence of electri¬ 
cal power is assumed to be present. Electrical power on the 
drive lines to the stronglink switches would threaten the 
nuclear safety design if the stronglinks could be enabled 
(closed) by “ordinary” electrical signals. 

Design Theme. Inadvertent electrical signals arc pre¬ 
vented from arming the warhead through isolation provided 
by the exclusion region barriers and stronglink switches that 
respond only to a unique pattern of signals. 
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Response Analysis. The necessary information con¬ 
tent of the unique signal pattern discriminated by both the 
MC2969 Intent Stronglink Switch and the MC2935 Trajec¬ 
tory Stronglink Switch were selected to obtain a suitably 
small probability of inadvertent generation of the unique 
signal patterns by extraneous signal sources. 

The probability of a random signal formal driving the 
MC2969or MC2935 to a closed position has been calculated. 
Safety-conservative assumptions arc that an extraneous sig¬ 
nal source produces only pulses of the required formal (i.c., 
amplitude and pulse width), in the proper ratio of events, that 
arc pairwise dependent, and arc applied to the proper lines. 
The MC2935 is a single-try switch with a unique signal 
pattern of 20 pulses on two lines while the MC2969 is a 
mullipic-iry device with one drive line requiring a specific 
pattern of 47 long and short pulses. Calculations show the 
probability of enabling the MC2935 is about 1 in 10* as 
compared to the requirement of I in 10 \ The probability of 
unlocking the MC2969 is 6.0 x 10* 9 on the first try while all 
subsequent trials arc 1.6 x ID 10 . Over a year of trials (millions) 
can be tolerated and still meet the 10 3 probability require¬ 
ment. 

Lightning 

Design Theme. Lightning protection for the B61 -6,8 
is provided by enclosing safety-critical firing set and detona¬ 
tor circuits within a conductive center ease and cover. The 
only points of entry into the center ease arc through a LAC in 
the cover plate and the radar cable from the nose. The radar 
cable entering the center case is protected by the conductive 
radar housing. 

Response Analysis. The LAC is designed to function 
as a normal connector for operational signals but provide a 
preferential breakdown path to the center case for lightning 
energy present at the case entry point. The LAC will limit the 
voltage within thecentercase to a maximum of 1400 V, while 
the stronglink switches and exclusion region barriers main¬ 
tain safety-critical isolation of at least 1600 V at 400°C and 
2600 V or higher at temperatures of -55°C to +75°C. Safety 
in the lightning environment depends primarily on assuring 
that the LAC breakdown characteristics arc controlled so that 
all LACs breakdown to the case before the voltage holdoff 
capability of the stronglink switches is exceeded. Each and 
every pin of every LAC is tested to confirm that the break¬ 
down voltage criterion is met. Sample units from each lot of 
stronglink switches are destructively tested to assure that die 
Iolconforms to abnormal environment requirements, includ¬ 
ing breakdown voltage at room and elevated temperatures. 
Reference 31 concludes that the I x 1() 6 probability is met 
even if units rejected by the screens arc included in the 
population. 


Chemical/lmmersion 
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Response Analysis. Because the center case is con¬ 
ductive, it is not credible to assume that electrical energy 
could be applied to the electrical system in the presence of a 
conductive fluid which could bypass the stronglink switches 
and simultaneously maintain isolation from th^-bomb ease 
(electrical ground). 
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Combined Abnormal Environments 

The B61-6,8 MCs require nuclear detonation safely l>e 
achieved ‘Tor individual or credible combinations of abnor¬ 
mal environments specified in the STS.” The applicable STS 
for the B6l-6,8 has been distributed for comments and revi¬ 
sion. Hie section defining credible combined abnormal 
environments is being discussed and a revision has been 
proposed. Therefore the specific STS guidance to which the 
design and evaluation program for the B6I -6,8 will be judged 
is not available. 

The bombs response to combinations of abnormal en¬ 
vironments relics on the demonstrated safe response to indi¬ 
vidual abnormal environments by virtue of the slronglink/ 
wcak-link/cxclusion region design concept For all single 
abnormal environments identified in the STS, it has,or wi II be 
shown that either the wcak-link elements of the nuclear 
system or firing set become irreversibly inoperable prior to 
the stronglink failure, or the sironglinks maintain electrical 
isolation. Additionally, the relative stronglink/wcak-link 
failure levels arc sufficicndy separated so that an abnormal 
environment not severe enough to disable the wcak-link is 
below the level necessary to degrade the strongllnk/cxclusion 
region isolation. Thus, Lherc arc two predictably safe rc- 

sponscs to an a bnorm a 1 cn v iron men t Lha t ha ve a d i rcc t bcari n g 

on system response to sequential exposure to abnormal envi¬ 
ronments: 

1. The wcak-link has become irreversibly inoperable 

prior to stronglink failure or bypass. 

2. The sironglinks remain intact (the weak-link has 

not failed). 

Given response # 1, bomb exposure to subsequent ab¬ 
normal environments would not result in a nuclear detonation 
since die system was rendered inoperable by the initial expo¬ 
sure. 

Given response #2, the bomb is expected to withstand 
additional abnormal environments terminating in a safe con¬ 
dition with either the sironglinks intact or with the wcak-link 
inoperable prior to stronglink failure or bypass. 


There has never been a enure bomb system exposed to 
an ordered sequence of abnormal environments. There has 
been abnormal environment testing performed at the major 
component level (c.g., the firing set) to identify potential 
problem areas. Numerous tests have been performed on the 
MC2918 Firing Set to establish structural properties and 
dielectric properties of the strong link/ex cl us ton region fol¬ 
lowing a high thermal abnormal environment. There are 
development activities in progress to improve the structural 
support of the stronglink switches following elevated tem¬ 
peratures resulting from fre and therefore address a combined 
abnormal environment of high thermal followed by shock. 
An aircraft crash (shock, static loading of the case) followed 
by fire is a “more credible” order of die combined environ¬ 
ments and one for which the firing set response is predictably 
safe. 

There arc plans to test the new MC4137 TS SG to com¬ 
bined shock and thermal tests. The steel ease (exclusion 
region) and rolamiics were selected based on the threat of 
combined abnormal environments. The sequence, of the 
thermal and shock should pose no threat to the predictability 
of the all-steel design. 
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5. Reliability 


Summary 

The reliability of the 861-6,8 has been predicted using 
the methods briefly descr ibed i n this chapter. ] 


Conclusions 


d 


jTo predict the bomb reliability, a 


failure analysis is performed for each component. Current as¬ 
sessments arc used for the components of the parent weapon 
or those that arc common to the B61 -7 or 861 -3,4 based upon 
stockpile data. Predictions for new components arc based on 
all available data from similar components in comparable 
weapon systems and on data for individual piece parts and 
their design use. 

The command disablement system is to have the fol¬ 
lowing MC-spccified reliability and premature probability 
characteristics:_ —- - ■ 
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Delimiting Conditions 


The predicted reliability is conditional on the follow¬ 
ing- 

1. Stockpile and use environments will be no more 
severe than the normal logistical and operational environ¬ 
ments described in the STS. 

2. All AMAC inputs will be present and proper. 

3. There will be no human errors in bomb handling or 
preparation for use that will reduce its reliability. 

4. The bomb and all of its components will be built to 
the usual DOE standard of production and process control. 

5. The specified cnd-of-Iifc of limited-life compo¬ 
nents will not be exceeded. Reliability assessments arc 
considered to apply atthc end of specified-life for limited-life 
components. 

6. Failure events not treated otherwise arc mutually 
exclusive or statistically independent. 
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6. Use Control 


Hie B6I-6,8 use control features include a command 
disable system and a Category D PAL System. Additional 
details about these features arc discussed in the Use Control 
Addendum for die B61-6,8 Bomb (Reference 37). 


yb f 
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Command Disable System 

Command disablement of the B61 -6,8 can be initiated 
from the aircra ft or at the preflight controller (Fig ure 23) on 
the bomb.! ( 


disablement system is composed of a DEI 002 Coded Device 
and a MC3246A Thermal Battery. 

Disablement results when (1) the correct three-digit 
disablement code is set on the DE1002 Code Switches, (2) the 
function select switch is set to the DI (disable) position, and 
(3) the T-handlc is extracted, mechanically initiating the/ 
MC3246A battery. The disablement loads located within the I 
bomb center ease, each isolated by discreet resistors within I 
the MC4 i 39 Junction Box, arc in parallel off the output of the • 
MC3246A batterv. . , 


Category D PAL 

The B61 -6,8 Category D PALsubsystem consists of an 
MC2907A Multiple CodeCoded Switch (MCCS), an MC2946 
OutputSwiich.andaPAL Regulator. When the subsystem is 
locked, the bomb cannot be prearmed. The PAL subsystem is 
shown schematically in Figure 47. 


MC2 907A Multiple Code Coded Switch 
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r T436 and T436B Power Supplies 

i The T436 and T436B (Figure 48) arc power supplies 

1 (28 V Ni-Cd baucrics) that can be used with ihc T1535, 

~ j T1536, Tl 539, T1555, or T1563 PAL Controllers. 


MC2946 Output Switch 

The MCCS utilizes the MC2946 Output. Switch to 
provide positive control of selected bomb prearming signals. 
Whenever the MC2946 is unlocked, the PAL unlock monitor 
wi 11 be sw itched to system return. This monitor alio ws a PAL- 
capable AM AC or ground control equipment to verify that the 
PAL is, or is not, locked. The functional and monitor contacts 
arc mechanically interlocked to ensure agreement of contact 
position. 

PALOperations 

The lock/unlock/rccode PAL operations can be per¬ 
formed on the B61 -6.8 at the bomb/aircraft interface connec¬ 
tor or through the PAL connector on the prefiight controller. 

Category D PAL Control 
Equipment 

T304C Continuity Test Set 

The T3(WC monitors the state of the MC2946 Output 
Switch (opcn/closcd). It contains a manually-operated gen¬ 
erator and therefore requires no additional power supply. 


T431A Charger Monitor 

The T431A tester charges and monitors the T436B 
Power Supply. 


CT1495 Adapter 

This adapter is used with the CT1478 Cable to connect 
the T436 Power Supply to the T1535.T1536.T1539.T1555, 
or T1563 PAL Controllers. 
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T1535 Portable Decoder 

The T1535 n is a ground decoder for Category D and F 
PALs. 1 1 operates withaT436B PowerSupply and 11 can lotk 



Figure 48. T436B Power Supply Connected to Tl SVi 
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T1536 Portable 
Recoder 

The T1536 33 is 
a ground rccodcr used 
to rccodc and code 
check the B61-6,8 
(only one bomb at a 
time can be recoded). 
The controller can 
change one code at a 
time or all codes, and 
the PAL is always left 
locked after a rccodc 
operation. The codes 
can be checked wiih- 
outaffcciing the status 


or unlock the B61-6,8 PAL. When the portable decoder is 
used for mixed and/or multiple loads, safe power must be 
provided to each weapon. In this operation, theTl 535 can fur¬ 
nish sufficient input for 
several Category D 
weapons in parallel 
(Figure 49). 


of the PAL. The status of the limited try is also shown. The 
code dials are equipped with privacy covers for operation by 
a team with split knowledge of the code (Figure 50). 


Figure 50. T1536 Portable Rccodcr 
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Figure 51. T1539 Code Verifier 


T1539 Code Verifier 

This verifier is used by a code verification team to 
check that the propercodc(s) is (arc) in each weapon. It docs 
not have a lock, unlock, or recode capability. This verifier 
also has privacy covers for operation by a team with split 
knowledge of the code (Figure 51). 

T1542 Adapter _ __ *--— ~ 


T1549A Decoder Programmer 

This programmer is an item of PAL control equipment 
that can be used for test and training purposes in conjunction 
with ground and aircraft decoder controllers. 

The T1549A will perform two functions when con¬ 
nected to a controller. The first function is to perform a 
duration and amplitude check of the aircraft and ground 
controller output data and power circuits for Category D 
systems. The second is to function as a coded sw itch simula¬ 
tor so that training in decoding operations can be performed 
with the T1549A and the aircraft and ground decoders. The 
T1549A will furnish feedback to the decoder that will allow 
the operator to determine whether an acceptable or unaccept¬ 
able response has occurred. For training operations, seven 
different fixed codes arc provided. Any of these codes will 
furnish OFF and/or LOC K and UNLOCK indications as 
appropriate. 


The CT1504 Cable, described below, connects the T1535 
Portable Decoder to the T1549A Decoder Programmer. This 
cable, currently used with all Air Force ground controllers, is 
shielded to afford EMR integrity in the range of 2 to 200 M H/.. 
No external or auxiliary power cables will be required since 
the T1549A will be powered via ihc ground rccodcr power 
(which uses the power cable) or aircraft safe power. 

T1555 Code Verifier 

The T1555 (Figure 52) is a code verifier that is 
intended as a replacement for the T1539 . Recode operation 
can also be performed. 

T1558 Adapter 

ThcTl 558 adapter attaches to the T15 55 Code Verifier 
to convert it to a recoding device. 

T1563 Advanced PAL Controller and T1572 
Portable Data Module 

The T1563 Controller can function as a rccodcr/de- 
coder for locking and unlocking the B61 -6,8 PAL. It is also 
capable of recoding the PAL in the appropriate software 
mode. It uses the same cables, adapters, and po wer supplie s 
as the T1535 Decoder and the T1536 Rer.oder I 


^Unlike the Tl 535 decoder, the 
TI563 is not capable of unlocking multiple weapons in 
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Figure 53. T1563 Advanced PAL Controller 
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parallel. Similarly, it can only rcccxlconc weapon at a time in 
the rccodcr mode (Figure 53). 

The TI563 was developed to ease the burden of the 
PAL ccxlc management. 11 offers the user a more effective and 
efficient means to accomplish secure code selection, inser¬ 
tion, and verification with functions such as no-knowledge 
rcccxlc and automatic verify. It is compatible with all pres¬ 
ently fielded PAL weapons. Air Force and Army, and the 
software can be changed to support future PAL interfaces. It 
also has a communications port to allow the transfer of 
information to and from the T1565 Headquarters Code Proc¬ 
essor (HCP) using the T1572 Portable Data Module (PDM). 
Itcan be powered by aT436 battery orTl 571A power supply. 
For case of use, the T1563 is operator in tcracti ve and portable. 

The T1572 Portable Data Module contains encrypted 
Permissive Action Link (PAI.) recode and verification data 
generated either by the T1563 Automated PAL Controller or 
the T1565 PAL Headquarters Equipment. The T1572 is used 
as a mass storage device (nonvolatile read/write memory) to 
carry both recode and recode verification data (data is en¬ 
crypted) between thcT1563 and theT1565; also, theT1572 
would be used by the T1565 to read Source Data PROMs (read 
only memories) generated by NSA containing encrypted 
recode data. The T! 572 can also be used to interrogate the 
TI563 concerning previous weapon access. 


T1569 Adapter 

This adapter is used with the CTI504 Cable to connect 
LhcT1535,T1536,T1539,T1555, orT1563 PAL Controllers 
to the B61-6,8 Pullout Connector. 

T1571 and T1571A Power Converters 

The T1571 Power Converter can replace the T436 and 
the T436B power supplies whenever standard ac power is 
available. The T1571A is compatible with European ac 
voltage and frequency. 

CT1478 Power Cable 

This cable connects either a T1535, T1536, T1539, or 
T1563 with the T436B Power Supply. 

CT1504 Controller Cable 

This cable is used with the T1569 Adapter to connect 
either a T1535, T1536, T1539, T1555, or T1563 PAJ. Con¬ 
troller to the pullout connector. 

CT1505 Test Cable 

This cable is used with thc T1569 Adapter to connect 
the T304C Continuity Test Set to thc pullout connector to 
monitor thc PAL. It will also mate directly with the JI PAL 
connector on the MC4136 Prcflighi Controller. 
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7. Type Units and Joint Test Assemblies 


“locked” or “unlocked” PAL monitor indication at both the 
pullout and prcfliglu panel connectors. The unlocked PAL 
monitor occurs when the TA “Tens” switch is se.t to I Don the 
MC4H6 FTcflight Controller. All other positions of this 
switch provide a locked PAL monitor. Dccodc/rccode capa¬ 
bilities are not provided. 

c. A fixed arm/sale monitor interface presents a “safe” 
status indication at the pullout connector. Arming and safing 
capabilities are not provided. 

'bi 


General 

Type weapons arc non-war reserve, nonnuclear con¬ 
figurations that arc designed and produced exclusively for 
testing. training, and evaluation by ihc DOE and DoD. DoD- 
type weapon requirements arc determined by Field Com- 
mand/Defense Nuclear Agency and the using military service 
via configuration meetings with the DOE design and produc¬ 
tion agencies. DoD and DOE concurrence on the design is 
obtained at these meetings. The B61 -6,8 JoiniTcst Assembly 
(JTA) is a DOE-dcvelopcd and produced configuration based 
on DOE/DoD requirements for use in the joint flight test 
program. JTA configurations arc comprised of nonnuclear 
DOE war reserve weapon (WR) components and non-WR 
instrumentation that replaces pan of the weapon system. The 
physical appearance and characteristics of JTA s approximate 
the WR configuration to the extent practicable. 

B61-6,8 Type Units 

Type 3 Loading, Handling, and Limited 
Maintenance Trainer 

The Type 3 Trainer allows realistic training for ail 
authorized DoD operational maintenance except limit life 
component exchange (LLCE) procedures. The Type3, shown 
in figure 54, has the following characteristics: 

a. External dimensions, appearance, weight, and cen¬ 
ter of gravity arc the same as WR to the extent that trainer 
handling procedures do not differ from WR handling proce¬ 
dures. 

b. The Type 3 Trainer is unclassified and contains no 
hazardous materials. 

c. The Center Bomb Subassembly contains bailasL 

d. A switchablc PAL monitor interface presents a 


-The Type 3 is marked as follows: 

1. Permanent marking stating INERT TYPE 3 with 
serial number at Lhe forward end of the center ease in accor¬ 
dance with existing procedures. 

2. Stenciled marking suiting B61-6 TYPE 3 with 
design agency part number, alteration number, and serial 
number located immediately above the permanent marking. 

B61-6 Type Trainers arc generated from existing B6I- 
OType 3 A Trainers, using retrofit kits shipped to the field for 
the conversion of existing trainers. 


































Figure 55. B6I-6.8 Type 3A Trainer 


Type 3A Operation and Maintenance Trainer 

The Type 3A Trainer allows realistic training for all 
authorized DoD operational maintenance including LLCE 
procedures. The Type 3A, shown in Figure 55, has the 
following characteristics: 

a. External dimensions, appearance, weight, and cen¬ 
ter of gravity arc the same as WR to the extent that irgincr 
handling procedures do not differ from WR handling proce¬ 
dures. 

b. The Type 3 A Trainer isclassificdSRD, and contains 
no hazardous materials. 

c. The center bomb subassembly contains a dummy 
secondary, a dummy primary, and all component decks with 
training components, cables, supports, pads and hardware. 

d. A swiichablc PAL monitor interface presents a 
’locked" or ‘‘unlocked” PAL monitor indication at both the 
pullout and prcflight panel connectors. The unlocked PAL 
monitor occurs when the TA "Tens" switch is set to 10 on the 
MC4I36 Prcflight Controller. All other positions of this 
switch provide a locked PAL monitor. Dccodc/rccodc capa¬ 
bilities arc not provided. 

c. A fixed arm/safe monitor interface presents a “safe” 
status indication at the pullout connector. Arming and safing 
capabilities arc not provided. 

f. An MC4136 Preflight Controller (Trainer) having a 
command disable coded device simulator with resettable T- 
handlc is provided for command disable training. All other 
controls on the prcflight controller panel exhibit WR-like 
manipulating capabilities. 

The Type 3A is marked as follows: 

1. Permanent marking suiting INERT TYPE 3 A with 
serial number at the forward end of the center ease in accor¬ 
dance with existing procedures. 

2. Stenciled marking suiting B61-6’TYPE 3A with 
design agency part number, alteration number, and serial 
number located immediately above the permanent marking. 
B6I-6 Type 3A Trainers arc generated from existing B61-0 
Type 3A Trainers, using retrofit kits shipped to die Held for 
conversion of existing trainers. 


Type 3E Loading and Handling Trainer 

The Type 3E Trainer can be used for all loading and 
handling training in accordance with established DoD proce¬ 
dures. Figure 56 illustrates the Type 3E configuration, which 
has the following characteristics: 

a. External dimensions, appearance, weight, andxcn- 
tcr of gravity arc the same as WR to the extent that trainer 
handling procedures do not differ from WR handling proce¬ 
dures. 

b. The Type 3E Trainer is unc lassificd, and contains no 
hazardous materials. 

c. The parachute, spin rocket, gas generator, and all 
center ease components arc replaced by ballast. 

d. A switchablc PAL monitor interface presents a 
“locked” or “unlocked” PAL monitor indication at both the 
pullout and prcflight panel connectors. The unlocked PAL 
monitor occurs when the TA “Tens” switch is set to 10 on the 
MC4136 Prcflight Controller. All other positions of this 
switch provide a locked PAL monitor. Dccodc/rccodc capa¬ 
bilities are not provided. 

e. A fixed arm/safe monitor interface presents a “safe” 
status indication at the pullout connector. Arming and safing 
capabilities arc not provided 

f. An MC4136 Prcflight Controller (Trainer) having a 
command disable coded device simulator with resettable T- 
handlc is provided for command disable training. All other 
controls on the prcflight controller panel exhibit WR-like 
manipulating capabilities. 

The Type 3E is marked as follows: 

1. Permanent marking suiting INERT TYPE 3E with 
serial number at the forward end of the center ease in accor¬ 
dance with existing procedures. 

2. Stenciled marking stating B61-6 TYPE 3E with 
design agency pari numbers, alteration number, and serial 
number located immediately above the permanent marking. 

B61-6 Type 3E Trainers arc generated from existing 
B61-0 Type 3ETrainers, using retrofit kits shipped to the. field 
for conversion of existing trainers. 
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Figure 56. B61-6,8 Type 3E Trainer 


B61-6,8 EOD Trainer 

Explosive Ordnance Disposal (EOD) training will be 
provided with slide and viewgraph presentation material 
along with non-hazardous representative components. The 
presentation material shows all the classified, explosive, and 
hazardous material locationsand identifying features of these 
components. 

Type 5A DOE Training and Evaluation Unit 

The B61 -6,8 Type 5 A is a functional, nonnuclear DOE 
trainer provided for pi lot production tool-made sample (TMS) 
evaluation, quality assurance training, and production engi¬ 
neering evaluation. The functional components are of WR 
quality The mock high explosive (IHE) and Lhc simulated 
nuclear components arc accurate representations of a WR 
system. The Type 5A will contain live explosive components 
(detonator, actuators, etc.). 

Type 5B DOE Training and NMLT Test 
Evaluation Trainer 

The B61-6,8 Type 5B is a nonnuclear, nonexpiosive 
unit with functional WR components and electrical system. 
One of the two Type 5B units scheduled is a training/evalu- 
auon unit jointly used by the SNL Military Liaison and 
Quality Assurance Departments. The second Type 5B unit is 
used by the DOE for pilot production and quality assurance 
evaluations at the DOE production plant. The WR compo¬ 
nents arc also used to evaluate the System Test Equipment 
(STE) associated with the NMLT and SLT programs. 

The Type 5B is WR with the following exceptions: 

a. The primary and secondary are nonnuclear, noncx- 
plosivc mockup assemblies with bridgewires representing 
detonators and actuators. __~ 


c. The gas generator, spin rocket, and Mt^4u3U Driver^ 
arc nonexpiosive, bridgewire devices. 

d. The parachute is a mass mockup trainer. 


Type 5C DOE Training and Evaluation Unit 

The B61-6,8 Type 5C is a functional, nonnuclear DOE 
trainer which only di( fers Irom a Type 5B by the dummy nose 
rather than a functional radar nose. An early type 5C is 
planned which will allow the production plant to design 
production fixturing, writing assembly and inspection proce¬ 
dures, and allow early training. 

Type 5D DOE JTA Training Unit 

The B61 -6,8 Type 5D is a nonnuclear DOE JTA trainer 
with functional JTA components (MC4130, Energy Transfer 
Unit (ETU), Monitors, and CF cables). The Type 5D is 
configured for the JTA 1 (freefall air) configuration with a kit 
that will enable it io be reconfigured to the JTA 2 (laydown). 
This trainer provides the production plant opportunity to 
finalize tooling, gauging, testers, and assembly and inspec¬ 
tion standards prior to the assembly of the first NMFT. 

JointTest Assemblies (JTA) 

Seven JTA versions arc defined for the B61 -6,8 NMFT 
and SFT programs, as follows: 

JTA1 — This configuration is used for tests of the 
frccfall air (FFA) delivery' option and docs not contain IHE. 

JTA2 — This configuration is used for tests of the 
retarded ground (laydown) delivery option and contains live 
IHE, mock Canned Subassembly (CS A), and a dummy radar 
nose. 

JTA3 — This configuration is used for tests of the 
retarded air (REA) delivery option. 

JTA4 — This configuration is used for tests of the 
retarded ground (laydown) delivery option and docs not 
contain I HE but does con ta in a WR CS A and Acom assembly. 
A dummy nose is provided. 

JTA6 — This configuration is used for tests of the 
retarded ground (laydown) delivery option and contains mock 
[HE, mock CSA, and WR detonators whose performance is 
measured. 

JTA7 — This configuration is used for tests of the 
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Table 3 








B61-6,8 JTA Configuration Definition 







JTA1 

JTA2 

JTA3 

JTA4 

JTA6 

JTA 7 

JTA8 




FFA 

REG 

REA 

REG 

REG 

REG 

REA 


Weapon Components 










Radar Nose 


WR 

MU 

WR 

MU 

MU 

MU 

WR 
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MU 

MU 

MU 

WR 

MU 

MU 

MU 


1 

j 1 

_ 

MU 

WR 

MU 

MU 

MU 

MU 

MU 


& L_ 

-• • 

WR 

WR' 

WR 

WR 

WR 

WR 

WR 


JTA Components 










Detonator Monitor 


JT 

— 

JT 

JT 

JT 

JT 

JT 


Load Assembly (Sugar Loaded Detonators)— 

JT 

— 

— 

— 

— 

— 

- 


‘Main detonators not fired on JTA2; special sugar loaded detonator assembly connected to firing set. 


WR = War Reserve 

MU = Mockup with WR electrical loading, as applicable 
JT = Special JTA version 


% 


JTA8 — This configurauon is used to test the contact 
fu7.c capability in the radar nose. The JTA8 is delivered in the 
retarded air delivery option with backup fuzing selected. The 
JTA8 is similar to a JTA3 except the radar portion of the nose 
is allowed to function at its selected altitude but is prevented 
from firing the JTA. The unit will fire by the contact fu/.cs in 
the radar nose or, if the impact docs not give adequate voltage 
output from the contact crystal, by the backup timer output 
from the MC4138 Programmer. 

For each version, maximum use is made of nonnuclear 
WR components with special attention paid to minimizing 
perturbation of the WR system. The JTA instrumentation is 
common to all versions. The configuration differences be¬ 
tween the seven versions arc shown in the table above. 


B61-6,8 JTA Instrumentation 

The B61-6,8 JTA Instrumentation may be categorized 
into passive recording of end event functions, of aircraft 
interface functions, and of other diagnostic functions. Non¬ 
volatile memory in the flight recorder is interrogated as a post- 
test activity, and provides 62 data channels of information. 
End event monitored data includes detonator function, deto¬ 
nator liming, neutron levels, and neutron pulse timing. A 
means of monitoring gas transfer is pan of the JT A instrumen¬ 
tation, but pres ent p la nning docs not now in clude gas tr a nsfer 
as a JTAcvcntjj 



maWi 



\CT) 


66 




















i ri±u- 





8. Ancillary Equipment 


Most B61 -6.8 ancillary equipment (training, lest, and 
handling equipment) is used on previous Mods of the B61. 
Any ncwormodidcdpicccsofancillarycquipmcntncccssary 
lor B61-6,8 operations will he determined by a Joint Task 
Group (JTG) to he scheduled. 

Shipping and Storage 

HI 125/HI 242/HI 012 

The HI 125 Bomb Cradle, ciLhcr singly or stacked a 
maximum of two high with the HI 242 Swivel Caster Set, or 
its alternate, the H10 i 2 Hand Truck, is used for transportation 
and storage of the B61 -6,8. These are carryover items that are 
interchangeable between the various B61 Mods. 

H1127 Storage Bag 

The HI 127 is used on each B61-6,8 to store one-for- 
onc items shipped with the weapon. 

Field Test and Handling Equipment 

Field test and handling equipment is authorized as re¬ 
quired for B61 -6,8 safety operations, bomb subassembly and 
assembly, monitoring, PAL control and training, limited-life 
component exchange (LLCE) and maintenance. Equipment 
previously developed for existing B61 Mods will be used 
wherever possible; new equipment will be designed only 
where necessary. 

Safety Operations 

The following carryover equipment will be authorized 
for use with the B61 -6,8. 

T290A Sampler, Air 

The T290A is used to detect tritium in the air and 
measure the level of concentration. TheT290A is an alternate 
for thcT446 Tritium Alarm Monitor when used as a portable 
monitor. 

T446 Alarm Monitor, Tritium 

The T446 is used to detect tritium in the air and 
measure the level of concentration. It may be powered by the 
T2071 PowerSuppiy. The T446 is an alternate for the T290A 
Air Sampler. 

T464 Charger, Battery 

The T464 can be used to operate the T446 Tritium 
Alarm Monitor from 115-V ac power while charging, or 
maintaining a charge on, die batteries in the T446. It will 


operate the T446 only w'iih batteries installed. The T2071 
Power Supply must be used with the T446 when batteries are 
not installed. 

T2071 Power Supply 

The T2071 allows direct and continuous use of the 
T446 Tritium Alarm Monitor from 115-V ac power lines. 

Limited Life Component Exchange 
Equipment 

The following carryover DOE-designed equipment is 
required to perform the planned LLCE, including weapon 
leak testing. New, additional equipment will be dcGned only 
if necessary. 

H631 Handling Tool, Caster 

The H631 is used to facilitate turning casters on 
the H1012 Hand Truck or H1242 Swivel Caster Set. It is an 
alternate for the HI216. 

H869 Strap, Hoisting 

The H869 adapts the rear bomb subassembly to over¬ 
head handlingcquipmcnt. It is used during parachute replace¬ 
ment or if the subassembly is removed for further access into 
the preflight and center bomb subassemblies. 

H1004 Adapter, Hoisting, Bomb 

The HI004 adapts the bomb to an overhead hoist or 
fork lift using bomb lugs as points of attachment. It is used to 
transfer the bomb from the HI 125 Bomb Cradle to other 
equipment. 

HI 011 Socket Set, Socket Wrench 

The H1011 is used to loosen and tighten electrical 
connector retaining nuts. 

HI 082 Pump and Control Box, 

Hydraulic 

TheH1082 is used with the HI 134 Hydraulic Ram and 
the HI 135 Ram Restraining Frame to apply pressure to the 
cover plate during removal and installation of the threaded 
ring in the center bomb subassembly. 

H1130 Handling Device, Bomb Tail 

The H1130 attaches to the util bomb subassembly to 
provide for manual lifting. It is used during parachute 
replacement and removal to gain further access to the interior 
of the weapon. 
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H1134 Ram, Hydraulic 

The 111 134 is used wiih the HI082 Hydraulic Pump 
and ( onirnl Box and die HI 135 Ram Restraining Frame to 
apply pressure to the cover plate for disassembly and reassem¬ 
bly ol' the center bomb subassembly. 

H1135 Frame, Restraining, Ram 

The H1135 is used with the H1134 Hydraulic Ram and 
HI 082 ) fydraulic Pump and Control Box to apply pressure to 
the cover plate during removal and instal lation of the threaded 
ring securing the cover plate. 

H1136 Handling Device 

The HI 136 attaches to the cover plate of the center 
bom b subassembly and provides a means for manual removal 
and installation. 

H1176 Wrench, Spanner 

The H1176 is used to remove and instal! the threaded 
ring which secures the cover plate in the center bomb subas¬ 
sembly. 

H1199 Wrench, Torque 

The H1 199 is used to remove and install nuts securing 
connectors of flat electrical cables to the EC A. 

HI 200 Wrench, Open End 

The H1200 may be required to hold the hex studs while 
the nuts arc being removed from the flat electrical connectors 
with the HI 199 Torque Wrench. 

H1201 Removal Tool, Electrical 

The HI201 is used to disconnect the flat electrical 
connectors from the ECA. 

HI 216 Tool, Caster 

The H1216 is used to facilitate turning casters of the 
H1012 Hand Truck or H1242 Swivel Caster Set. It is an 
alternate for the H631 Caster Tool. 

H1228C Protector Kit, Electrical 
Connector 

The H1228C contains the connector covers and short¬ 
ing plugs required when any electrical disconnection is made 
during maintenance operations. 

HI 229 Stand, Bomb 

The H1229 is used to rotate and secure the center bomb 
subassembly in a vertical position while components arc 
being replaced. This stand is for use on board naval aircraft 
carriers. It is used with the H1238 Assembly Platform at other 
locations. 


HI 234 Wrench, Torque 

The H1234 is used to lighten or install the studs in the 
MC4139 Junction Box located in the ECA. 

HI238 Platform, Assembly Stand 

The H1238 is used with the H1229 Bomb Stand during 
the replacement of limited life components. It is required at 
all locations except naval ships, and provides a base for the 
HI 229. 

HI248 Removal Tool, Machine Screw 

The HI248 is required to loosen screws securing case 
sections together if commercial tools fail to loosen screws. It 
is an alternate for the HI354 Screw' Removal Tool. 


HI354 Screw Removal Tool 

The HI354 is required to loosen the screws securing 
ease sections together if commercial tools fail to loosen the 
screws. It is an alternate for HI 248 Machine Screw Removal 
Tool. 

Hi379A Tool, Handling 

The H1379A will be used for removal and installation 
of the ECA. 

HI 493 Wrench 

The H1493 will be used to torque the gland into the 
Acorn and 2M assemblies. 

T304C Test Set, Continuity, Multiple 
Purpose 

The T304C is used to check electrical continuity. 
When connected to the umbilical connector of the B6I-6,8, 
through theCT1520cable, theT304C will verify the status of 
the MC2969 Intent Stronglink Switch. When used with the 
CT1505 cable through the J1 connector on the MC4136 
Preflight Controller, the T304C will indicate the PAL status 
(lock/unlock). 

T461 Panel, Leak Detection 

The T461 is used with the T489 or T460 Leak Detec¬ 
tion Chambers to check the seal integrity of the center bomb 
subassembly ease. 

T489 Chamber, Leak Detection 

ThcT489 is used with ihcT461 Leak Detection Panel 
to check the seal integrity of the center bomb subassembly 
after replacement of limited life components in the B61-6,8. 
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Operational Capability 

In addition to the limited life component exchange 
equipment listed above. the following carryover equipment 
will lv authorized for use with the B61 -6,8, as necessary, lor 
maintenance including replacement of parachutes. 

H563 Sling, Beam Type 

The H563 attaches to the frame of the HI 125 Bomb 
Cradle for hoisting with overhead handling equipment. 

H587 Sling, Atomic Weapon Trailer 

The H587.may be used as an alternate to the H563 
Beam Type Sling for overhead handling of the bomb in the 
HI 125 Bomb Cradle. Two shackles, P/N 870731-00, arc 
required when using the H587. 

H1012 Truck, Hand 

The H1012 is an al tcrnaic for the H1242 S wi vel Caster 
Set. 

j 

H1170 Socket, Socket Wrench 

The HI 170 is used to remove and install the gas 
generator during replacement of components in the tail bomb 
subassembly. 

H1172 Installing-Removal Tool, 

Parachute 

The H1172 is used to lift and guide the aft end of the 
parachute to its proper position during installation. 

H1173 Handling Tool 

Two H1173s arc inserted through holes in the aft end 
of the tail bomb subassembly and into a plate on the parachute 
to aid in pulling and locating the parachute during its instal¬ 
lation. 

H1195 Pliers 

When necessary to install or remove shorting plugs on 
MC1605 Series Battery Cable Assemblies in a T436B Power 
Supply, the H1195 may be used to disconnect or connect the 
cable assemblies at the junction box without removing the 
batteries from the case. 

HI 237 Socket, Socket Wrench 

The HI237 is used during maintenance of MC1605 
Series Batteries to remove and install terminal nuts to permit 
cable assembly replacement. It isalso used to apply the proper 
torque lo these nuts and to the nuts securing the battery 
terminal links. 


HI 242 Caster Set, Swivel 

The HI242 attaches to the HI 125 Bomb Cradle to 
provide mobility lor the weapon. It is part of the shipping and 
storage configuration for the WR weapon and is included as 
special equipment il desired for training weapons. 

HI247 Spacer, Case Section 

Two or three H 1247s may be used to ensure personnel 
safety during removal and installation of the tail bomb subas¬ 
sembly. 

HI 348 Wrench 

The H1348 is used to connect or disconnect the pulloui 
cable to the B61-6,8. 

T431 Charger-Monitor, Battery 

The T431 is used to monitor the electrical condition of 
and to charge the T436 or T436B Power Supply or the 
MCI 605 Battery. Il is an alternate for the T431 A. 

T431A Charger-Monitor, Battery 

The T431A is used to monitor the electrical condition 
of and to charge the T436 or T436B Power Supply or the 
MCI605 Battery. It is an alternate for the T431. 

T436 Power Supply 

The T436 is used as a power supply for the T1535 
Portable Decoder, T1536 Portable Recoder, T1539 Portable 
Code Verifier, and T1555 Portable Rccodcr/Vcrificr. The 
T436 is an alternate for the T436B described below for all but 
the T1563. 

T436B Power Supply 

The T436B is used as a power supply for the T1535 
Portable Decoder, T1536 Portable Rccodcr, T1539 Portable 
Code Verifier, T1555 Portable Recodcr/Verifier, and T1563 
Automated PAL Controller. TheT436B is an alternate for the 
T436. 



T1535 Decoder, Portable 

The T1535 is used with the T436 or T436B Power 
Supply to lock or unlock the B61 -6,8. A CT1478 connects the 
T1535 to the T436B and a CT1495 adapts the CTI478 to the 
T436. The CT1504 connects the Tl 535 to the B61 -6,8. 
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T1536 Recoder, Portable 

The T! 536 is used with the T436 or T436B Power 
Supply to recode or code check the 1361-6,8. A CT1478 
connects the 71536 to the T436I3 and a CTI495 adapts the 
CT1478 to the T4 36. The CT1504 connects the T1536 to the 
B6I-6.8. 

T1539 Code Verifier 

The T1539 can be used with thcT436orT436B Power 
Supply to axle check the B61-6.8. A CT1478 connects the 
T1539 to the T436B and aCT1495 adapts the CT1478 to the 
T436. The CT 1504 connects the T1539 to the B61 -6,8. Alter¬ 
nate for T1555 Portable Recodcr/Vcrificr. 

\ T1542 Adapter, Administrative __ 


T1564 Trainer, PAL 

ThcTl 564 may be used lor training in performing six¬ 
digit PAL operations. It simulates the coded switch in the 
bomb. 

T1568 Trainer, PAL 

ThcTl 568 may be used for training in performing six- 
and twelve-digit PAL operations. It simulates the coded 
switch in the bomb. 

T1571 Electronic AC/DC Power 
Converter 

The T1571 is used to convert 110-V ac 60 Hz to 28-V 
dc. It is an alternate to the T436/T436B for powering the 
T1535.T1536, T1539, TI555, and T1563. 


T1549A Decoder Programmer 

The T1549A is used to perform a functional test of the 
T1535 and can be used as a simulated coded switch to permit 
training in use of the T1535. 

T1555 Recoder/Verifier, Portable 

The T1555 is used with the T436 or T436B Power 
Supply to code check the B61-6.8. A CT1478 connects the 
T1555 to the T436B and a CT1495 adapts thcCT1478 to the 
T436. The CT 1504 connects the T1555 to the B61 -6,8. When 
used with the T1558 Recode Enable Adapter, the T1555 can 
recode the B61-6,8. 

T1557 Adapter, Test 

The T1557 is installed on the electrical connector of the 
T436B Power Supply cover to maintain a discharged power 
supply in the discharged state. 

T1558 Adapter,- Recode Enable 

The T1558 can be used with the TI555 Portable Re- 
coder/Vcrificr to permit recoding of the B61-6,8. 

T1563 Controller, Automated, PAL 

The T1563 can be used to recode, lock, unlock, code 
check, and verify codes in the B61-6.8. 


T1571A Electronic AC/DC Power 
Converter 

TheT1571Aisusedtoconvert 115-230-Vac 50/60 Hz 
to 28-V dc and 115-230-V ac 400 Hz to 28-V dc. It is an 
alternate to the T436/T436B for powering the T1535. T1536. 
T1539, TI555, and T1563. The T1571A isan alternate for the 
T1571. 

T1572 Portable Data Module 

The T1572 is used to carry encrypted data to and from 
command headquarters and the recode detachments. 

TYPE 3A Bomb Maintenance 

The following equipment is required only to per¬ 
form maintenance on B61-6.8 TYPE 3A Bombs. 

HI 249 Extractor 

The H1249 is used to remove the energy absorber from 
the nose. 

HI 404 Fixture, Lift 

The H1404 is used to permit removal of the support 
sleeve from Type 3A Bombs using overhead handling equip¬ 
ment 
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9. Test and Evaluation 


Nuclear System Tests 



i 
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!d. 

B61-6,8 System Tests 
Development Test Program 

The B6l-6,8 development test program will provide 
assurance that the system will function properly and safely 
throughout its stockpile life. Four categories of tests arc bci ng 
conducted to meet this objective: STS environment, laydown 
shock, flight, and special laboratory tests. Tabic 3 summa¬ 
rizes the B61-6,8 lest program. The A, B, and C prefixes of 
the test unit numbers indicate the three phases of the program 
that relate the hardware development progress. Phase A 
employs first prototype hardware; new design major compo¬ 
nents arc constructed by Sandia using commercial ly avai lablc 
piece-parts that have not yet been qualified. Phase B hardware 
will be constructed by the DOE manufacturing agency using 
mostly qualified piece-parts. If any design changes arc 
identified by Phase A results, they will be incorporated. Phase 
C hardware is WR-qualily material constructed during pro¬ 
duction qualification (TMS) activities at the DOE plant. 
About twenty functional AF&F lesi uniLs wi 11 be assembled in 
addition to many nonfunctional, units designed to collect en¬ 
vironmental data. 


\.No tests will be conducted in the 
areas of acoustic, pressure, humidity, precipitation, wind, and 
suspended panicle environments. Bomb ballistic perform¬ 
ance will be monitored and evaluated to ascertain applicabil¬ 
ity of Navy aircraft weapon delivery software. 

STS Environmental Series Tests 

These tests will demonstrate the B61 -6,8 will function 
reliably aficrcxpcriencing theextremesof mechanical shock, 
vibration, and temperature tabulated or inferred (aircraft 
carriage and flight conditions) in the STS for Stages 1 to 5. 

The SE (STS environments) test units will verify that 
the B61-6,8 will survive the environments. In addition, FT 
((light test) units beginning with FT4 will be subjected to STS 
environments before being flown. The STS test series will 
verify weapon reliability after handling, storage, transporta¬ 
tion, and llight environments based on worst-ease data accu¬ 
mulated via prior B6I development programs. 

Laydown Shock Tests 

The abi 1 ily of the B61 -6,8 nuclear system and firing set 
to survive the severe mechanical shocks of laydown delivery 
against hard, irregular targets will be verified both in the 
special tests and flight tests. Drop tower tests were conducted 
durign the B61-7 program to measure the response of the 
nuclear system and AF&F to impacts with hard, irregular tar¬ 
gets. The B61-7 test unit was dropped with its longitudinal 
axis horizontal to strike a railroad rail at the weapon primary 
and at the firing set station. Because the B61-6,8 is identical 
to the B61 -7 at these stations, the conclusion from these tests, 
coupled with B61-3/4 testing and analysis, is that no release 
altitude restrictions arc required in using the B61 -6,8 against 
hard, irregular targets. 

The rocket launcher facility will be used to simulate 
worst-ease slapdown and longitudinal impact conditions with 
the unit at both its maximum and minimum temperatures. 
From the early tests, component response data at the Acorn 
assembly was obtained which will be used in component 
qualification. Additional worst-case laydown delivery condi¬ 
tions will be conducted with fully functional AF&F hardware 
at maximum and minimum temperatures at the rocket launcher 
facility. 
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Table 4. B61-6.8 Development Test Plan 


ns i 


1 

\ lard ware 


Idem 

f acilil\ 

Configuration 

Quality 

Date 

LS l (A ? 

SNL 

Short Center Case 

MU 

6 -8/88 

LShAt 

SNL 

AF&F. open setup 

FF 

6/88 

SLIMiAi 

SNL 

Center Case 

MU 

9/88 

SHI (A) 

SNL 

Bomb, lateral 

MU 

12/88 

SH2(A» 

SNL 

Bomb, axial 

MU 

4/89. 

SE3(A) 

SNL 

Bomb 

FF 

2,3/89 

NDl(A) 

LANL 

Primary + 

MU 

6/89 

SLIM2(A) 

SNL 

Center Case 

MU 

3/89 

SLIM.W) 

SNL 

Center Case 

MU 

6/89 

MATUB) 

LANL 

Center Case 

FF 

7/89 

MAT2(B) 

SNL 

PrcHighl+Tail 

FF 

4/89 

CTU KB) 

SNL 

Special 

FF 

7/89 

ECT 1(B) 

SNL 

AF&F+JTA 

FF 

7/89 

SE5(R) 

SNL 

Bomb-JTA 

FF 

8/89 

SE6(B) 

SNL 

BombAVR 

FF 

6/89 

SE7(B) 

SNL 

Bomb-WR 

FF ' 

7/89 

SE8(B) 

SNL 

Bomb 

MU 

6/89 

SE9(B) 

SNL 

Bomb 

MU 

7/89 

FT 1(B) 

WSMR 

Bomb 

FF 

8/89 

FT2< B) 

WSMR 

Bomb 

FF 

9/89 

FT3(B) 

WSMR 

Bomb 

FF 

9/89 

FF4(B) 

WSMR 

Bomb 

FF 

11/89 

FT7(B) 

Dabob 

Bomb 

FF 

1/90 

FT6(R) 

TTR 

Bomb 

FF 

3/90 

FT5(B) 

TTR 

Bomb 

FF 

5/90 

FT8(B) 

TTR 

Bomb 

FF 

7/90 

FT9(B) 

TTR 

Bomb 

FF 

9/90 

FT 10(C) 

TTR 

Bomb 

FF 

11/90 

FTI 1(C) 

WSMR 

Bomb 

FF 

2/91 

FT 12(C) 

TTR 

Bomb 

FF 

2/9! 

ND2(B) 

SNL 

Center Case 

FF 

6/90 

SEKXB) 

SNL 

Center Case 

MU 

5/89 

NS1(B) 

SNL • 

Bomb 

FF 

12/89 

NS2(B) 

SNL 

Bomb 

FF 

3/90 

UCl(B) 

SNL 

Bomb 

FF 

7/90 

UC2(B) 

SNL 

Special 

FF 

4/90 

EM 1(B) 

SNL 

Bomb 

FF 

2/90 

SEI 1(B) 

SNL 

Bomb 

FF 

6/90 

SEI2(B) 

SNL 

Bomb 

MU 

7/90 

TR1(B) 

SNL 

Bomb 

FF 

3/90 

TR2(B) 

SNL 

Bomb 

FF 

6/90 

TR3(B) 

SNL 

Bomb 

FF 

6/90 


Purpose 

Acorn survivability in simumlalcd laydown 
Bench test of new breadboard components & new tester 
First Sandia Los Alamos Interface Mockup 
Maximum laydown impact using rocket launcher. Acorn 
Maximum laydown impact using rocket launcher. Acorn 
STS shock, vibration with fully functional AF&F 
Time of shock arrival at neutron generator location 
Second Sandia Los Alamos Interface Mockup 
Sandia Los Alamos Interface Mockup, “WR” foam 
One-year Accelerated Aging Unit for material comp. 
Resultant salt air environment inside tail & prcflight 
“Intent-enabled” TSSG aircraft compatibility test unit 
Bench test followed by bomb configuration test of JTA 
STS test series followed by max. lateral impact with JTA 
STS + max. lateral impact at min. temperature (WR) 

STS + max. lateral impact at max. temperature (WR) 

STS + max. axial impact at min. temperature, Acom sun . 
STS + max. axial impact at max. temperature, Acom surv. 
A-4, JTA-6 
A-7E, WR, REG 
A/F-18, JTA-8 

A-6, JTA-3 prececded by STS environments 
F/A-18, JTA-7 prececded by STS environments 
A-7E, WR, REG prececded by STS environments 
B-1B, JTA-2 prececded by STS environments 
F/A-18, REG, WR proceeded by STS environments 
B-52H CSRL, JTA-8, proceeded by STS environments 
F/A-18, JTA-1 proceeded by STS environments 
F/A-18, JTA-6 proceeded by STS environments 
F/A-18, Design Demonstration Test proceeded by STS 
Neutron Generator “proof test” 

Hydrostatic pressure capability of center ease 
Nuclear safety certification unit (combined cnv.) 
Electro-static Discharge (reliability) + nuc. cert, unit 
Command disable effectiveness 
Command disable bench tests (multiple), MU loads 
EMR evaluation 
STS + max. lateral ir 


EL. 


ET-5C trainer for Pamex (WR) 

ET-5D trainer for Pantex (JTA) 

Type 3, 3A, 3E Training unit evaluations 


Test Idem Code: 

LS = Lab Simulated laydown shock 
ES = Electrical System 

SLIM = Sandia Los Alamos Interface Mockup 
SE = STS Environments (shock, vih., thermal) 
ND = Nuclear Development 


MAT = Material Compatibility 
CTU = Compatibility Test Unit 
ECT = Electrical Compatibility Test 
FT = Flight Test 
NS = Nuclear Safely 


UC = Use Control 
EM = Electromag. Rail 
TR = Trainer evaluation 
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Flight Tests 

The flight icsi program will consist of approximately 
12 air drops. Eight are now planned to lx* low-altitude 
laydow n deliveries. Because worst-ease slapdown sluxksare 
produced at minimum release velocities, the tests are concen¬ 
trated in that area. Two flight tests will he retarded airburst 
and two free fall airburst. All data collection on these tests will 
utilize the JTA system in development. Some Bight tests w ill 
he conducted without any instrumentation on-board to estab¬ 
lish the WR/JTA equivalence. 

Special Tests 

In addition to the tests discussed above, special pur¬ 
pose tests will be performed to obtain information on particu¬ 
lar elements of B6 1-6,8 design and performance. Component 
response to aircraft vibration was measured during the B61- 
3,4 and B61-7 development programs in the Vibration 
Flyaround (VFA) tests. It has been determined dial the FB- 
111A produces the most severe in-flight vibration environ¬ 
ment and these levels will be used in the STS environment pre¬ 
conditioning for the B61-6.8. Only if the new Navy A12 
aircraft is available, will it be necessary to add B61 b,K VFA 
tests. Similarly, mechanical shock produced by aircraft 
ejection from present Navy bomb racks has prc\iousl> been 
determined. 


Electromagnetic Radiation (EMR) 

Tests to investigate the F.MR environment as defined 
in the STS will be conducted. Previous test results on B61 -3,4 
and B61-7 were used as appropriate to establish areas of 
concern for the B61 -6,8. No new' areas of concern arc now' 
identified except the EMR specification has changed in the 
new STS and the response of the B61 -6.8 will be determined. 

Compatibility 

Three Sandia/Los Alamos Interface Mockup (SLIM) 
units, representing succeeding stages of hardware develop¬ 
ment, will be used toconfirm the mechanical compatibility of 
Sandia and Los Alamos components. The compatibility of 
materials used in thcccnicr bomb subassembly will bestudied 
in an accelerated aging unit. Preliminary aircraft compatibil¬ 
ity checks w'ill be made pnor to all flight tests, with particular 
emphasis on assuring the reliable performance of the new 
intent-enabled MC4137 TSSG. Tests w ill also bQ^performed 
by Sandia and by Los Alamos to confirm adequate standoff 
distance and the proper functioning of the generators in the 
extreme electrical and mechanical environments at weapon 
detonation. 

Detailed information on each of the tests conducted in 
the B61 -6.8 development program will \k available in Bomb 
B(x)ks on file at SNL and summary test reports. 
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10. Programming 


Since die B6! -6.X is a factory rcirofit of the existing 
Bo1 (>.2.5 stockpi 1c, the nonnal early program support dirough 
Phase I and Phase 2 studies involving both nuclear laborato¬ 
ries arc not appropriate. The chan below lists the significant 
development and production milestones to be accomplished. 


B61-6/8 PROGRAM SCHEDULE 

D0D-D0E/SNLA MAJOR MILESTONES 
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APPENDIX A 

Military Characteristics for the B61-6,8 
(Proposed) 
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Military Characteristics 

1 • l » * it'M'nil 

1 ! K* I'RD) Purpose: This ixirtiim ul ihc Military Charac¬ 
teristics tM(’s) specifics the requirements ot the Department 
ol I >elense i DOD) to the Department of Energy (DOE) for the 
P.M Mmls 6 and 8 (B6i-6,8) gravity bombs. The modifica¬ 
tions are lo incorporate modem safety, security, and opera¬ 
tional leatures. The B61-6, X designs shall have the features 
delineated m paragraph 2 of these MCs. 

11.1 (U)The B61 Mod 6 is a modification of the B61 ModO. 
11. 2 (U) The B61 Mod 8 is a modification of the B61 Mods 

2 and 3. 

1.2 (U) Contingencies: The design, development, test and 
evaluation of the bombs will be coordinated by the B61 
Project Officers Group (POG). Should it appear impractical 
to meet any of these characteristics or that meeting them will 
unduly delay development or production of the bombs, incur 
unreasonable costs, or require excessive special nuclear 
materials, prompt notification shall be made by the Lead 
Project Oil iter (LPO) via service channels to the Nuclear 
Wcafxins Council Standing Committee (NWCSC). 

1.3 (l ’ ) Competing Characteristics: in the event that compli - 
ance with these MCs results in design conflict, priorities shall 
be observed in the order listed below, giving consideration to 
tradeoffs which allow higher priority MCs to be attained 
while minimizing the degradation of the competing lower 
priority MCs. Operational effectiveness, technical feasibil¬ 
ity, schedule, and cost will provide the basis for making 
tradeoffs among the desired competing characteristics. Trade¬ 
offs may ho made with the guidance and approval of the B61 
POG. 'Hie NWCSC must approve all MC changes. 

1.3.1 (l h Nuclear Safety 

1.3.2 (U) Minimum Intrinsic Radiation 

1.3.3 (U) Reliability 

1.3.4 (U) Physical Characteristics 

1.3.3 (U) Yield • 

1.3.6 (U) Radioactive Material Dispersal 

1.3.7 (IB HE Safety 

1.3.8 (U) Economical Use of Nuclear Material 

1.3.9 (LO Operational Simplicity 

1.3.10 (U) Command and Control Features 

1.3.11 (U) Maintenance 

2. (U) Bonify Characteristics 

2.1 (U) General Considerations: 

2.1.1 (U) The bombs shall not require functional testing in the 
stockpile. 


2.1.2 (U) The bombs shall be designed so thaL the likelihood 
of plutonium dispersal in an accident environment is mini- 
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Comments 
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_Mititary Characteristics_ 

2 1.4 * i ‘ i Provision shall be made lor easy removal of some 
eont|xinent ol ihe electrical system vital to the function of the 
Ixmibs. This provision shall not compromise Service opera¬ 
tional requirements or storage criteria. Since this feature is a 
use-control function only, the bomb must meet all nuclear 
safety requirements in paragraph 2.8 whether the separable 
component is installed or removed. 

2.1.3 (U) The design of the bomb shall be consistent with the 
environmental conditions delineated in the stockpile-to-Tar- 
get Sequence (STS) and shall be deliverable in accordance 
with aircraft profiles in the STS. 

2 2 (\ h OfH'r/Hinnnl ----‘ 

Lor* 


n 


‘bob 


x -X 

2.3.3 (U) Groundbursi (Frccfall) 

2.3.4 (U) Laydown: (Retarded delayed groundbursi.) The 
firing times shall be the same as the parent bomb. 

r ~ 

2.3.6 (U) The bombs shall be capable of functioning properly 
in water depth to the limits of the Laydown timers. 

2.4 (U) Physical Characteristics: 

2.4.1 (U) Weight: 770 pounds (nominal) 

2.4.2 (U) The length shall be 14 1.6 inches maximum. 

2.4.3 (U) The body diameter shall be 13.3 inches maximum. 

2.4.4 (U) The shape and geometry of the bombs shall be such 
as to minimize drag and adverse flight characteristics on the 
strike aircraft during all phases of the flight profile. 

2.4.5 (U) War reserve bombs shall be identified with perma¬ 
nent and distinctive markings. 



i ulP\ 
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Military Characteristics 


2 * 1 1 h Aircraft C 'ompuahilay 

2.5. I (l ') The bombs shall tv capable of carriage (single and 
multiple! and release under operational conditions from the 
following carriers without aircraft modification: 


AIRCRAFT 

A-4M 
A-6F..C 
F/A-ISA.C 
A-7E 
A-12 


CARRIAGE 
Single External 
Multiple External 
Multiple External 
Multiple External 
Multiple 


2.5.2 (U) The bombs shall be compatible with aircraft both 
with and without a Unique Signal Generator (USG) capabil¬ 
ity. 

2.6 (U) Reliability Characteristics: _____—_— 


i 


t 


2.7 (U) Environmental Characteristics: 

2.7.1 (li) The bombs shall renin full operational capability 
during and after exposure to the normal environmental con¬ 
ditions specified in the STS. 

2.7.2 (U) Aftcrcxposure to abnormal environments specified 
in the STS. the bombs are run expected to retain full opera¬ 
tional reliability, but should still maintain the standards of 
safety set forth in these MCs. 

2.S (U) Safety Characteristics: 

2.5.1 (U)Thc requirements outlined in ihis section should be 
considered minimal. They are not intended to restrict the 
designer in the advancement of nuclear safety. 

2.8.2 (U) There shall be no irreversible functioning of any 
enabling or arm ing component prior to release of a bomb from 
an aircraft. 

2.8.3 (U) In the event of a detonation initiated at any one point 

in the bomb prim ary high explosive, the probability of achiev¬ 
ing a nuclear yield greater than the energy equivalent to that 
produced by detonation of four pounds of trinitrotoluene 
(TNT) shall not e xcee d one in one mill ion (1 x 10~*). _ 
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Military Characteristics 


Comments 
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2.X.5 (U) The probability (jkt bomb lifetime) of a premature 
nuclear detonation of a bomb for the normal environments 
described in the STS shall not exceed: 

2.8.5.1 (U) Prior to preann (which includes application of ihc 
arming power and the unique intern enabling stimulus) and 
prior to release from the aircraft and in the absence of die 
trajectory stimulus, I x 1()' 9 . 

2.8.5.2 (U) After prearm and prior to release from the aircraft, 
and in the absence of trajectory stimulus, 1 x 10* 6 . 

2.8.5.3 (U) After prearm and after release from the aircraft, 
and in the absence of trajectory stimulus, 1 x 10 3 ). 

2.8.6 (U) The probability (per occurrence) of a premature 
nuclear detonation in the normal re lease envelope after receipt 
of the trajectory stimulus shall not exceed; 

2.8.6.1 (U) Prior to expiration of the safe separation time, 

1 x 1()\ 

2.8.6.2 (U) After expiration of the safe separation time and 
prior to the intended detonation, 1 x 10 2 . 

2.8.7 (U) The probability (per occurrence) of a nuclear deto¬ 
nation of a bomb for individual or credible combinations of 
abnormal environments specified in the STS shall not exceed: 

2.8.7.1 (U) In the absence of any unique intent and trajectory 
stimuli, I x 10‘ 6 . 

2.8.7.2 (U) After receipt of the unique intent and in the 


absence oLthc trajectory stimulus. 1 x 10 - 


WO 


J 


T.8.9 (U) For the B61-6, 8 it shall be possible to monitor the 
safe.status of a bomb electrically in any STS configuration. It 
shall be possible to electrically safe the bomb at any point in 
the STS prior to release from the aircraft. Both of these re¬ 
quirements apply to normal environments only. 

2.8.10 (U) The initiation of the bomb arming sequence shall 
require both AMAC power at the time of weapon release and 
bomb separation from the delivery aircraft. 

2.8.11 (U) Monitor circuits in a bomb which arc associated 
with the in-flight monitor and control functions shall be 
adaptable to in-flight monitor and control systems employing 
monitor power limited to a value less than that which would 
activate any bomb components considered critical from a 
safety standpoint. 

2.8.12 (U) The bomb shall be designed to facilitate Render 
Safe Procedures (RSP) which return the weapon to a condi- 
tion that isassafe as reasonably achievable. Thebombdesign 
RSP, and EOD operations should allow the bomb to be 
shipped with a minimum of special storage and movement 
constrain ls. 

2.8.13 (U) The design shall: 

2.8.13.1 (U) Minimi radiological, chemical toxicity or 
other hazards during maintenance, handling, and other opWa- 
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tmns in normal environments. Radiological hazards should 
he as low as reasonably achievable when a honib is subjected 


to abnormal environments. 

. 2.8.1 3.2 (U) U se insens itive hi,eh explosives (IHli) ._,_§ 

i IT 

p 1 

• \ 


If any energy storage components arc included 
within a bomb thai arc capable of prearming or arming the 
bomb (other than primary power sources), they shall dis¬ 
charge if energy input is interrupted. The lime required for 
discharge to a safe level shall be the minimum time practi¬ 
cable after removal of arming power. 

2.8.16(H) Bomb arrays shall remain subcrilica I in all planned 
logistical and operational configurations and under single or 
credible combinations of abnormal environments as specified 
in the STS. 


I 


2.9 (U) Command arui Control Characteristics: 

2.9.1 (U) Permissive Action Link tPAL): The B61-6.X shall 
incorporate CAT D PAL in accordance with the general 
characteristics outlined in Lite OSD letter. 3 

2.9.2 (U) Command Disablement (CD): 

2.9.2.1 (U) Nonviolent Command Disablement systems for 
the B61-6, 8 shall be designed in accordance with the OSD 
letter 3 . A command disabled bomb shall be safely transport¬ 
able through normal nuclear weapon supply channels. 

2.9.2.2 (U) The disablement system designs and assessment 
of effectiveness shall be in accordance with the intent of the 
OSD policy letter. 3 

2.9.2.3 (U) The bomb system shall provide for manual inser¬ 
tion of a three-digit code on the bomb prcflight panel in 
preparation for disablement. The preparation for disable¬ 
ment shall be reversible. 

2.9.2.4 (LT) Disablement shall be accomplished by an action 
which is separate and distinct from the action for preparation 
for disablement. 

2.9.2.3 (U) Disablement shall not require PAL codes or PAL 
code equipment. 



2.9.2.6 (U)ThcCD systems shall he capablcof operation with 
the PAL in any mode or state. 

2.92.1 (U) A capability to visually and laclilcly determine the 
status (disabled or not disabled) s ha 1 1 he provided. 


3 
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Military Characteristics 


Comments 


2.9.2.9 (U) Under normal environmental conditions, the 
probability of accidental disablement due to the CD system in 
the absence of any input stimuli except for normal stimuli 
(c.g., Category D PAL recoding, decoding, and status checks) 
shall not exceed: 

2.9.2.9.l(U) 1 x 10 s per bomb year (with 1 x 10 5 per weapon 
lifetime desired) prior to preparation for CD. 

2.9.2.9.2 (U) lx 10 3 after preparation for CD but prior to the 



age, and Handling Equipment Characteristics: 

2.10.1 (U) Consistent with paragraphs 1.3, 2.1.3, and 2.6.2, 
Limited Life Component Exchanges (LLCE) and periodic 
maintenance shall be minimized. Provisions shall be made 
for simple replacement and ease of access with a minimum of 
downtime during LLCE. 

2.10.2 (U) Maintenance procedures and DOE-supplied sup¬ 
port equipment shall be functionally and physically compat¬ 
ible with existing maintenance procedures and equipment 
insofar as practicable. 

2.10.3 (U) Preplanned, scheduled, or periodic maintenance 
(excluding PAL) shall be minimized in the stockpile. 

2.10.4 (U) DOE-supplied support material and equipment to 
be used with these bom bs shall be capable of withstanding the 
same STS environmental conditions required of the bombs in 
areas where they arc to be used together. 

2.10.5 (U) DOE-supplied shipping and storage material shall 
be compatible with military transportation systems and han¬ 
dling and storage procedures as described in the STS. 



i- 


l)oC/'boh 

Vs) 



Us) 


’(.U) Office of the Secretary of Defense letter “General Char¬ 
acteristics for Permissive Action Link Systems Used with 
Nuclear Warheads’* dated 18 April 1980. 
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